Nov 1 00:39:15.028948 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Oct 31 23:02:53 -00 2025 Nov 1 00:39:15.028982 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:39:15.029002 kernel: BIOS-provided physical RAM map: Nov 1 00:39:15.029013 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Nov 1 00:39:15.029024 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000786cdfff] usable Nov 1 00:39:15.029036 kernel: BIOS-e820: [mem 0x00000000786ce000-0x000000007894dfff] reserved Nov 1 00:39:15.029084 kernel: BIOS-e820: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Nov 1 00:39:15.029098 kernel: BIOS-e820: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Nov 1 00:39:15.029114 kernel: BIOS-e820: [mem 0x00000000789de000-0x000000007c97bfff] usable Nov 1 00:39:15.029139 kernel: BIOS-e820: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Nov 1 00:39:15.029152 kernel: NX (Execute Disable) protection: active Nov 1 00:39:15.029164 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Nov 1 00:39:15.029176 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Nov 1 00:39:15.029188 kernel: extended physical RAM map: Nov 1 00:39:15.029207 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Nov 1 00:39:15.029220 kernel: reserve setup_data: [mem 0x0000000000100000-0x0000000076813017] usable Nov 1 00:39:15.029233 kernel: reserve setup_data: [mem 0x0000000076813018-0x000000007681be57] usable Nov 1 00:39:15.029246 kernel: reserve setup_data: [mem 0x000000007681be58-0x00000000786cdfff] usable Nov 1 00:39:15.029259 kernel: reserve setup_data: [mem 0x00000000786ce000-0x000000007894dfff] reserved Nov 1 00:39:15.029272 kernel: reserve setup_data: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Nov 1 00:39:15.029284 kernel: reserve setup_data: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Nov 1 00:39:15.029297 kernel: reserve setup_data: [mem 0x00000000789de000-0x000000007c97bfff] usable Nov 1 00:39:15.029310 kernel: reserve setup_data: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Nov 1 00:39:15.029322 kernel: efi: EFI v2.70 by EDK II Nov 1 00:39:15.029338 kernel: efi: SMBIOS=0x7886a000 ACPI=0x7895d000 ACPI 2.0=0x7895d014 MEMATTR=0x77003a98 Nov 1 00:39:15.029351 kernel: SMBIOS 2.7 present. Nov 1 00:39:15.029364 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Nov 1 00:39:15.029376 kernel: Hypervisor detected: KVM Nov 1 00:39:15.029389 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Nov 1 00:39:15.029400 kernel: kvm-clock: cpu 0, msr 1c1a0001, primary cpu clock Nov 1 00:39:15.029412 kernel: kvm-clock: using sched offset of 4165548949 cycles Nov 1 00:39:15.029425 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Nov 1 00:39:15.029438 kernel: tsc: Detected 2500.004 MHz processor Nov 1 00:39:15.029451 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Nov 1 00:39:15.029464 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Nov 1 00:39:15.029480 kernel: last_pfn = 0x7c97c max_arch_pfn = 0x400000000 Nov 1 00:39:15.029492 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Nov 1 00:39:15.029503 kernel: Using GB pages for direct mapping Nov 1 00:39:15.029514 kernel: Secure boot disabled Nov 1 00:39:15.029525 kernel: ACPI: Early table checksum verification disabled Nov 1 00:39:15.029542 kernel: ACPI: RSDP 0x000000007895D014 000024 (v02 AMAZON) Nov 1 00:39:15.029554 kernel: ACPI: XSDT 0x000000007895C0E8 00006C (v01 AMAZON AMZNFACP 00000001 01000013) Nov 1 00:39:15.029569 kernel: ACPI: FACP 0x0000000078955000 000114 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Nov 1 00:39:15.029582 kernel: ACPI: DSDT 0x0000000078956000 00115A (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Nov 1 00:39:15.029594 kernel: ACPI: FACS 0x00000000789D0000 000040 Nov 1 00:39:15.029607 kernel: ACPI: WAET 0x000000007895B000 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Nov 1 00:39:15.029620 kernel: ACPI: SLIT 0x000000007895A000 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Nov 1 00:39:15.029633 kernel: ACPI: APIC 0x0000000078959000 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Nov 1 00:39:15.029646 kernel: ACPI: SRAT 0x0000000078958000 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Nov 1 00:39:15.029663 kernel: ACPI: HPET 0x0000000078954000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Nov 1 00:39:15.029676 kernel: ACPI: SSDT 0x0000000078953000 000759 (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Nov 1 00:39:15.029689 kernel: ACPI: SSDT 0x0000000078952000 00007F (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Nov 1 00:39:15.029703 kernel: ACPI: BGRT 0x0000000078951000 000038 (v01 AMAZON AMAZON 00000002 01000013) Nov 1 00:39:15.029718 kernel: ACPI: Reserving FACP table memory at [mem 0x78955000-0x78955113] Nov 1 00:39:15.029733 kernel: ACPI: Reserving DSDT table memory at [mem 0x78956000-0x78957159] Nov 1 00:39:15.029747 kernel: ACPI: Reserving FACS table memory at [mem 0x789d0000-0x789d003f] Nov 1 00:39:15.029762 kernel: ACPI: Reserving WAET table memory at [mem 0x7895b000-0x7895b027] Nov 1 00:39:15.029777 kernel: ACPI: Reserving SLIT table memory at [mem 0x7895a000-0x7895a06b] Nov 1 00:39:15.029794 kernel: ACPI: Reserving APIC table memory at [mem 0x78959000-0x78959075] Nov 1 00:39:15.029809 kernel: ACPI: Reserving SRAT table memory at [mem 0x78958000-0x7895809f] Nov 1 00:39:15.029823 kernel: ACPI: Reserving HPET table memory at [mem 0x78954000-0x78954037] Nov 1 00:39:15.029838 kernel: ACPI: Reserving SSDT table memory at [mem 0x78953000-0x78953758] Nov 1 00:39:15.029853 kernel: ACPI: Reserving SSDT table memory at [mem 0x78952000-0x7895207e] Nov 1 00:39:15.029868 kernel: ACPI: Reserving BGRT table memory at [mem 0x78951000-0x78951037] Nov 1 00:39:15.029882 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Nov 1 00:39:15.029896 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Nov 1 00:39:15.029911 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Nov 1 00:39:15.029929 kernel: NUMA: Initialized distance table, cnt=1 Nov 1 00:39:15.029944 kernel: NODE_DATA(0) allocated [mem 0x7a8ef000-0x7a8f4fff] Nov 1 00:39:15.029959 kernel: Zone ranges: Nov 1 00:39:15.029974 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Nov 1 00:39:15.029989 kernel: DMA32 [mem 0x0000000001000000-0x000000007c97bfff] Nov 1 00:39:15.030002 kernel: Normal empty Nov 1 00:39:15.030016 kernel: Movable zone start for each node Nov 1 00:39:15.030028 kernel: Early memory node ranges Nov 1 00:39:15.030040 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Nov 1 00:39:15.030076 kernel: node 0: [mem 0x0000000000100000-0x00000000786cdfff] Nov 1 00:39:15.030089 kernel: node 0: [mem 0x00000000789de000-0x000000007c97bfff] Nov 1 00:39:15.030100 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007c97bfff] Nov 1 00:39:15.030112 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Nov 1 00:39:15.030124 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Nov 1 00:39:15.030136 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Nov 1 00:39:15.030148 kernel: On node 0, zone DMA32: 13956 pages in unavailable ranges Nov 1 00:39:15.030161 kernel: ACPI: PM-Timer IO Port: 0xb008 Nov 1 00:39:15.030175 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Nov 1 00:39:15.030193 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Nov 1 00:39:15.030206 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Nov 1 00:39:15.030220 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Nov 1 00:39:15.030232 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Nov 1 00:39:15.030246 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Nov 1 00:39:15.030258 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Nov 1 00:39:15.030270 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Nov 1 00:39:15.030283 kernel: TSC deadline timer available Nov 1 00:39:15.030295 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Nov 1 00:39:15.030308 kernel: [mem 0x7ca00000-0xffffffff] available for PCI devices Nov 1 00:39:15.030323 kernel: Booting paravirtualized kernel on KVM Nov 1 00:39:15.030336 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Nov 1 00:39:15.030348 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Nov 1 00:39:15.030361 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Nov 1 00:39:15.030373 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Nov 1 00:39:15.030387 kernel: pcpu-alloc: [0] 0 1 Nov 1 00:39:15.030399 kernel: kvm-guest: stealtime: cpu 0, msr 7a41c0c0 Nov 1 00:39:15.030413 kernel: kvm-guest: PV spinlocks enabled Nov 1 00:39:15.030428 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Nov 1 00:39:15.030441 kernel: Built 1 zonelists, mobility grouping on. Total pages: 501318 Nov 1 00:39:15.030454 kernel: Policy zone: DMA32 Nov 1 00:39:15.030470 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:39:15.030484 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:39:15.030497 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:39:15.030510 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Nov 1 00:39:15.030523 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:39:15.030538 kernel: Memory: 1876636K/2037804K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47496K init, 4084K bss, 160908K reserved, 0K cma-reserved) Nov 1 00:39:15.030551 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Nov 1 00:39:15.030564 kernel: Kernel/User page tables isolation: enabled Nov 1 00:39:15.030576 kernel: ftrace: allocating 34614 entries in 136 pages Nov 1 00:39:15.030590 kernel: ftrace: allocated 136 pages with 2 groups Nov 1 00:39:15.030602 kernel: rcu: Hierarchical RCU implementation. Nov 1 00:39:15.030617 kernel: rcu: RCU event tracing is enabled. Nov 1 00:39:15.030644 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Nov 1 00:39:15.030659 kernel: Rude variant of Tasks RCU enabled. Nov 1 00:39:15.030673 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:39:15.030687 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:39:15.030701 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Nov 1 00:39:15.030718 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Nov 1 00:39:15.030732 kernel: random: crng init done Nov 1 00:39:15.030746 kernel: Console: colour dummy device 80x25 Nov 1 00:39:15.030760 kernel: printk: console [tty0] enabled Nov 1 00:39:15.030774 kernel: printk: console [ttyS0] enabled Nov 1 00:39:15.030787 kernel: ACPI: Core revision 20210730 Nov 1 00:39:15.030802 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Nov 1 00:39:15.030819 kernel: APIC: Switch to symmetric I/O mode setup Nov 1 00:39:15.030834 kernel: x2apic enabled Nov 1 00:39:15.030848 kernel: Switched APIC routing to physical x2apic. Nov 1 00:39:15.030862 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093d6e846, max_idle_ns: 440795249997 ns Nov 1 00:39:15.030877 kernel: Calibrating delay loop (skipped) preset value.. 5000.00 BogoMIPS (lpj=2500004) Nov 1 00:39:15.030891 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Nov 1 00:39:15.030905 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Nov 1 00:39:15.030922 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Nov 1 00:39:15.030936 kernel: Spectre V2 : Mitigation: Retpolines Nov 1 00:39:15.030950 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Nov 1 00:39:15.030965 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Nov 1 00:39:15.030980 kernel: RETBleed: Vulnerable Nov 1 00:39:15.030995 kernel: Speculative Store Bypass: Vulnerable Nov 1 00:39:15.031008 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Nov 1 00:39:15.031022 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Nov 1 00:39:15.031037 kernel: GDS: Unknown: Dependent on hypervisor status Nov 1 00:39:15.031070 kernel: active return thunk: its_return_thunk Nov 1 00:39:15.031084 kernel: ITS: Mitigation: Aligned branch/return thunks Nov 1 00:39:15.031101 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Nov 1 00:39:15.031115 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Nov 1 00:39:15.031130 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Nov 1 00:39:15.031144 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Nov 1 00:39:15.031158 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Nov 1 00:39:15.031172 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Nov 1 00:39:15.031186 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Nov 1 00:39:15.031201 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Nov 1 00:39:15.031216 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Nov 1 00:39:15.031230 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Nov 1 00:39:15.031244 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Nov 1 00:39:15.031261 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Nov 1 00:39:15.031276 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Nov 1 00:39:15.031290 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Nov 1 00:39:15.031304 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Nov 1 00:39:15.031318 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Nov 1 00:39:15.031334 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Nov 1 00:39:15.031348 kernel: Freeing SMP alternatives memory: 32K Nov 1 00:39:15.031363 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:39:15.031377 kernel: LSM: Security Framework initializing Nov 1 00:39:15.031392 kernel: SELinux: Initializing. Nov 1 00:39:15.031406 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Nov 1 00:39:15.031422 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Nov 1 00:39:15.031437 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Nov 1 00:39:15.031451 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Nov 1 00:39:15.031465 kernel: signal: max sigframe size: 3632 Nov 1 00:39:15.031480 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:39:15.031496 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Nov 1 00:39:15.031511 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:39:15.031526 kernel: x86: Booting SMP configuration: Nov 1 00:39:15.031540 kernel: .... node #0, CPUs: #1 Nov 1 00:39:15.031554 kernel: kvm-clock: cpu 1, msr 1c1a0041, secondary cpu clock Nov 1 00:39:15.031572 kernel: kvm-guest: stealtime: cpu 1, msr 7a51c0c0 Nov 1 00:39:15.031589 kernel: Transient Scheduler Attacks: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Nov 1 00:39:15.031606 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Nov 1 00:39:15.031621 kernel: smp: Brought up 1 node, 2 CPUs Nov 1 00:39:15.031637 kernel: smpboot: Max logical packages: 1 Nov 1 00:39:15.031652 kernel: smpboot: Total of 2 processors activated (10000.01 BogoMIPS) Nov 1 00:39:15.031667 kernel: devtmpfs: initialized Nov 1 00:39:15.031681 kernel: x86/mm: Memory block size: 128MB Nov 1 00:39:15.031698 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7895e000-0x789ddfff] (524288 bytes) Nov 1 00:39:15.031711 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:39:15.031725 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Nov 1 00:39:15.031739 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:39:15.031753 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:39:15.031767 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:39:15.031781 kernel: audit: type=2000 audit(1761957554.085:1): state=initialized audit_enabled=0 res=1 Nov 1 00:39:15.031794 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:39:15.031808 kernel: thermal_sys: Registered thermal governor 'user_space' Nov 1 00:39:15.031825 kernel: cpuidle: using governor menu Nov 1 00:39:15.031839 kernel: ACPI: bus type PCI registered Nov 1 00:39:15.031853 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:39:15.031867 kernel: dca service started, version 1.12.1 Nov 1 00:39:15.031880 kernel: PCI: Using configuration type 1 for base access Nov 1 00:39:15.031894 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Nov 1 00:39:15.031908 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:39:15.031923 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:39:15.031937 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:39:15.031953 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:39:15.031968 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:39:15.031982 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:39:15.031996 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:39:15.032009 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:39:15.032023 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Nov 1 00:39:15.032037 kernel: ACPI: Interpreter enabled Nov 1 00:39:15.032071 kernel: ACPI: PM: (supports S0 S5) Nov 1 00:39:15.032086 kernel: ACPI: Using IOAPIC for interrupt routing Nov 1 00:39:15.032104 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Nov 1 00:39:15.032118 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Nov 1 00:39:15.032132 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Nov 1 00:39:15.032374 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Nov 1 00:39:15.032512 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Nov 1 00:39:15.032530 kernel: acpiphp: Slot [3] registered Nov 1 00:39:15.032545 kernel: acpiphp: Slot [4] registered Nov 1 00:39:15.032559 kernel: acpiphp: Slot [5] registered Nov 1 00:39:15.032578 kernel: acpiphp: Slot [6] registered Nov 1 00:39:15.032590 kernel: acpiphp: Slot [7] registered Nov 1 00:39:15.032604 kernel: acpiphp: Slot [8] registered Nov 1 00:39:15.032618 kernel: acpiphp: Slot [9] registered Nov 1 00:39:15.032631 kernel: acpiphp: Slot [10] registered Nov 1 00:39:15.032645 kernel: acpiphp: Slot [11] registered Nov 1 00:39:15.032659 kernel: acpiphp: Slot [12] registered Nov 1 00:39:15.032672 kernel: acpiphp: Slot [13] registered Nov 1 00:39:15.032686 kernel: acpiphp: Slot [14] registered Nov 1 00:39:15.032703 kernel: acpiphp: Slot [15] registered Nov 1 00:39:15.032715 kernel: acpiphp: Slot [16] registered Nov 1 00:39:15.032729 kernel: acpiphp: Slot [17] registered Nov 1 00:39:15.032742 kernel: acpiphp: Slot [18] registered Nov 1 00:39:15.032754 kernel: acpiphp: Slot [19] registered Nov 1 00:39:15.032767 kernel: acpiphp: Slot [20] registered Nov 1 00:39:15.032780 kernel: acpiphp: Slot [21] registered Nov 1 00:39:15.032793 kernel: acpiphp: Slot [22] registered Nov 1 00:39:15.032807 kernel: acpiphp: Slot [23] registered Nov 1 00:39:15.032821 kernel: acpiphp: Slot [24] registered Nov 1 00:39:15.032838 kernel: acpiphp: Slot [25] registered Nov 1 00:39:15.032851 kernel: acpiphp: Slot [26] registered Nov 1 00:39:15.032865 kernel: acpiphp: Slot [27] registered Nov 1 00:39:15.032878 kernel: acpiphp: Slot [28] registered Nov 1 00:39:15.032893 kernel: acpiphp: Slot [29] registered Nov 1 00:39:15.032907 kernel: acpiphp: Slot [30] registered Nov 1 00:39:15.032921 kernel: acpiphp: Slot [31] registered Nov 1 00:39:15.032935 kernel: PCI host bridge to bus 0000:00 Nov 1 00:39:15.033109 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Nov 1 00:39:15.033245 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Nov 1 00:39:15.033361 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Nov 1 00:39:15.033475 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Nov 1 00:39:15.033589 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x2000ffffffff window] Nov 1 00:39:15.033702 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Nov 1 00:39:15.033844 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Nov 1 00:39:15.033993 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Nov 1 00:39:15.034165 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Nov 1 00:39:15.034309 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Nov 1 00:39:15.034435 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Nov 1 00:39:15.034562 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Nov 1 00:39:15.034691 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Nov 1 00:39:15.035325 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Nov 1 00:39:15.035496 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Nov 1 00:39:15.035638 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Nov 1 00:39:15.035791 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Nov 1 00:39:15.035932 kernel: pci 0000:00:03.0: reg 0x10: [mem 0x80000000-0x803fffff pref] Nov 1 00:39:15.048605 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Nov 1 00:39:15.048806 kernel: pci 0000:00:03.0: BAR 0: assigned to efifb Nov 1 00:39:15.048943 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Nov 1 00:39:15.049116 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Nov 1 00:39:15.049256 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80404000-0x80407fff] Nov 1 00:39:15.049390 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Nov 1 00:39:15.049512 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80400000-0x80403fff] Nov 1 00:39:15.049530 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Nov 1 00:39:15.049544 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Nov 1 00:39:15.049557 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Nov 1 00:39:15.049576 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Nov 1 00:39:15.049588 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Nov 1 00:39:15.049601 kernel: iommu: Default domain type: Translated Nov 1 00:39:15.049614 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Nov 1 00:39:15.049735 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Nov 1 00:39:15.049853 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Nov 1 00:39:15.049969 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Nov 1 00:39:15.049985 kernel: vgaarb: loaded Nov 1 00:39:15.050003 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:39:15.050016 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:39:15.050029 kernel: PTP clock support registered Nov 1 00:39:15.050042 kernel: Registered efivars operations Nov 1 00:39:15.050070 kernel: PCI: Using ACPI for IRQ routing Nov 1 00:39:15.050083 kernel: PCI: pci_cache_line_size set to 64 bytes Nov 1 00:39:15.050096 kernel: e820: reserve RAM buffer [mem 0x76813018-0x77ffffff] Nov 1 00:39:15.050109 kernel: e820: reserve RAM buffer [mem 0x786ce000-0x7bffffff] Nov 1 00:39:15.050122 kernel: e820: reserve RAM buffer [mem 0x7c97c000-0x7fffffff] Nov 1 00:39:15.050138 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Nov 1 00:39:15.050151 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Nov 1 00:39:15.050164 kernel: clocksource: Switched to clocksource kvm-clock Nov 1 00:39:15.050177 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:39:15.050190 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:39:15.050203 kernel: pnp: PnP ACPI init Nov 1 00:39:15.050217 kernel: pnp: PnP ACPI: found 5 devices Nov 1 00:39:15.050230 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Nov 1 00:39:15.050243 kernel: NET: Registered PF_INET protocol family Nov 1 00:39:15.050259 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:39:15.050272 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Nov 1 00:39:15.050285 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:39:15.050298 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Nov 1 00:39:15.050311 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Nov 1 00:39:15.050324 kernel: TCP: Hash tables configured (established 16384 bind 16384) Nov 1 00:39:15.050337 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Nov 1 00:39:15.050350 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Nov 1 00:39:15.050363 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:39:15.050379 kernel: NET: Registered PF_XDP protocol family Nov 1 00:39:15.050494 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Nov 1 00:39:15.050603 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Nov 1 00:39:15.050712 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Nov 1 00:39:15.050819 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Nov 1 00:39:15.050923 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x2000ffffffff window] Nov 1 00:39:15.051062 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Nov 1 00:39:15.051190 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Nov 1 00:39:15.051211 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:39:15.051225 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Nov 1 00:39:15.051238 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093d6e846, max_idle_ns: 440795249997 ns Nov 1 00:39:15.051252 kernel: clocksource: Switched to clocksource tsc Nov 1 00:39:15.051266 kernel: Initialise system trusted keyrings Nov 1 00:39:15.051279 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Nov 1 00:39:15.051293 kernel: Key type asymmetric registered Nov 1 00:39:15.051307 kernel: Asymmetric key parser 'x509' registered Nov 1 00:39:15.051323 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:39:15.051336 kernel: io scheduler mq-deadline registered Nov 1 00:39:15.051350 kernel: io scheduler kyber registered Nov 1 00:39:15.051364 kernel: io scheduler bfq registered Nov 1 00:39:15.051377 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Nov 1 00:39:15.051390 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:39:15.051404 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Nov 1 00:39:15.051419 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Nov 1 00:39:15.051432 kernel: i8042: Warning: Keylock active Nov 1 00:39:15.051446 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Nov 1 00:39:15.051465 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Nov 1 00:39:15.051605 kernel: rtc_cmos 00:00: RTC can wake from S4 Nov 1 00:39:15.051721 kernel: rtc_cmos 00:00: registered as rtc0 Nov 1 00:39:15.051838 kernel: rtc_cmos 00:00: setting system clock to 2025-11-01T00:39:14 UTC (1761957554) Nov 1 00:39:15.051952 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Nov 1 00:39:15.051970 kernel: intel_pstate: CPU model not supported Nov 1 00:39:15.051986 kernel: efifb: probing for efifb Nov 1 00:39:15.052004 kernel: efifb: framebuffer at 0x80000000, using 1876k, total 1875k Nov 1 00:39:15.052019 kernel: efifb: mode is 800x600x32, linelength=3200, pages=1 Nov 1 00:39:15.052034 kernel: efifb: scrolling: redraw Nov 1 00:39:15.052062 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Nov 1 00:39:15.052077 kernel: Console: switching to colour frame buffer device 100x37 Nov 1 00:39:15.052092 kernel: fb0: EFI VGA frame buffer device Nov 1 00:39:15.052130 kernel: pstore: Registered efi as persistent store backend Nov 1 00:39:15.052148 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:39:15.052163 kernel: Segment Routing with IPv6 Nov 1 00:39:15.052181 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:39:15.052196 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:39:15.052211 kernel: Key type dns_resolver registered Nov 1 00:39:15.052226 kernel: IPI shorthand broadcast: enabled Nov 1 00:39:15.052241 kernel: sched_clock: Marking stable (384002230, 144023347)->(601572062, -73546485) Nov 1 00:39:15.052256 kernel: registered taskstats version 1 Nov 1 00:39:15.052271 kernel: Loading compiled-in X.509 certificates Nov 1 00:39:15.052287 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: f2055682e6899ad8548fd369019e7b47939b46a0' Nov 1 00:39:15.052302 kernel: Key type .fscrypt registered Nov 1 00:39:15.052319 kernel: Key type fscrypt-provisioning registered Nov 1 00:39:15.052334 kernel: pstore: Using crash dump compression: deflate Nov 1 00:39:15.052350 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:39:15.052365 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:39:15.052380 kernel: ima: No architecture policies found Nov 1 00:39:15.052396 kernel: clk: Disabling unused clocks Nov 1 00:39:15.052411 kernel: Freeing unused kernel image (initmem) memory: 47496K Nov 1 00:39:15.052426 kernel: Write protecting the kernel read-only data: 28672k Nov 1 00:39:15.052442 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Nov 1 00:39:15.052459 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Nov 1 00:39:15.052474 kernel: Run /init as init process Nov 1 00:39:15.052491 kernel: with arguments: Nov 1 00:39:15.052505 kernel: /init Nov 1 00:39:15.052520 kernel: with environment: Nov 1 00:39:15.052536 kernel: HOME=/ Nov 1 00:39:15.052554 kernel: TERM=linux Nov 1 00:39:15.052568 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:39:15.052587 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:39:15.052608 systemd[1]: Detected virtualization amazon. Nov 1 00:39:15.052624 systemd[1]: Detected architecture x86-64. Nov 1 00:39:15.052640 systemd[1]: Running in initrd. Nov 1 00:39:15.052655 systemd[1]: No hostname configured, using default hostname. Nov 1 00:39:15.052670 systemd[1]: Hostname set to . Nov 1 00:39:15.052686 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:39:15.052702 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:39:15.052720 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:39:15.052736 systemd[1]: Reached target cryptsetup.target. Nov 1 00:39:15.052751 systemd[1]: Reached target paths.target. Nov 1 00:39:15.052766 systemd[1]: Reached target slices.target. Nov 1 00:39:15.052782 systemd[1]: Reached target swap.target. Nov 1 00:39:15.052800 systemd[1]: Reached target timers.target. Nov 1 00:39:15.052817 systemd[1]: Listening on iscsid.socket. Nov 1 00:39:15.052833 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:39:15.052850 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:39:15.052865 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:39:15.052881 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:39:15.052897 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:39:15.052913 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:39:15.052931 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:39:15.052947 systemd[1]: Reached target sockets.target. Nov 1 00:39:15.052962 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:39:15.052979 systemd[1]: Finished network-cleanup.service. Nov 1 00:39:15.052994 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:39:15.053013 systemd[1]: Starting systemd-journald.service... Nov 1 00:39:15.053028 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:39:15.053044 systemd[1]: Starting systemd-resolved.service... Nov 1 00:39:15.053081 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Nov 1 00:39:15.053100 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:39:15.053116 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:39:15.053160 kernel: audit: type=1130 audit(1761957555.042:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.053176 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:39:15.053199 systemd-journald[185]: Journal started Nov 1 00:39:15.053285 systemd-journald[185]: Runtime Journal (/run/log/journal/ec205688d870c4fa617e09bb025882e5) is 4.8M, max 38.3M, 33.5M free. Nov 1 00:39:15.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.053602 systemd-modules-load[186]: Inserted module 'overlay' Nov 1 00:39:15.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.073489 kernel: audit: type=1130 audit(1761957555.061:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.073568 systemd[1]: Started systemd-journald.service. Nov 1 00:39:15.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.080111 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:39:15.088213 kernel: audit: type=1130 audit(1761957555.079:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.088515 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:39:15.089190 systemd-resolved[187]: Positive Trust Anchors: Nov 1 00:39:15.112617 kernel: audit: type=1130 audit(1761957555.087:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.089201 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:39:15.089257 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:39:15.091152 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:39:15.133204 kernel: audit: type=1130 audit(1761957555.125:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.109955 systemd-resolved[187]: Defaulting to hostname 'linux'. Nov 1 00:39:15.124570 systemd[1]: Started systemd-resolved.service. Nov 1 00:39:15.152903 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:39:15.152938 kernel: audit: type=1130 audit(1761957555.135:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.152967 kernel: Bridge firewalling registered Nov 1 00:39:15.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.132742 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:39:15.135302 systemd[1]: Reached target nss-lookup.target. Nov 1 00:39:15.166644 kernel: audit: type=1130 audit(1761957555.157:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.150421 systemd-modules-load[186]: Inserted module 'br_netfilter' Nov 1 00:39:15.155447 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:39:15.158412 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:39:15.176196 dracut-cmdline[201]: dracut-dracut-053 Nov 1 00:39:15.177613 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:39:15.197077 kernel: SCSI subsystem initialized Nov 1 00:39:15.218739 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:39:15.218815 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:39:15.218835 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:39:15.226140 systemd-modules-load[186]: Inserted module 'dm_multipath' Nov 1 00:39:15.227080 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:39:15.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.239653 kernel: audit: type=1130 audit(1761957555.230:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.238630 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:39:15.250425 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:39:15.259952 kernel: audit: type=1130 audit(1761957555.251:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.270079 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:39:15.290078 kernel: iscsi: registered transport (tcp) Nov 1 00:39:15.316293 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:39:15.316378 kernel: QLogic iSCSI HBA Driver Nov 1 00:39:15.348974 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:39:15.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.351080 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:39:15.404081 kernel: raid6: avx512x4 gen() 17919 MB/s Nov 1 00:39:15.422085 kernel: raid6: avx512x4 xor() 7463 MB/s Nov 1 00:39:15.440077 kernel: raid6: avx512x2 gen() 18077 MB/s Nov 1 00:39:15.458084 kernel: raid6: avx512x2 xor() 24046 MB/s Nov 1 00:39:15.476079 kernel: raid6: avx512x1 gen() 17277 MB/s Nov 1 00:39:15.494094 kernel: raid6: avx512x1 xor() 20183 MB/s Nov 1 00:39:15.512078 kernel: raid6: avx2x4 gen() 17286 MB/s Nov 1 00:39:15.531349 kernel: raid6: avx2x4 xor() 7304 MB/s Nov 1 00:39:15.549083 kernel: raid6: avx2x2 gen() 12958 MB/s Nov 1 00:39:15.567091 kernel: raid6: avx2x2 xor() 16424 MB/s Nov 1 00:39:15.585080 kernel: raid6: avx2x1 gen() 13023 MB/s Nov 1 00:39:15.603087 kernel: raid6: avx2x1 xor() 15102 MB/s Nov 1 00:39:15.621086 kernel: raid6: sse2x4 gen() 9159 MB/s Nov 1 00:39:15.639095 kernel: raid6: sse2x4 xor() 5745 MB/s Nov 1 00:39:15.657077 kernel: raid6: sse2x2 gen() 10439 MB/s Nov 1 00:39:15.675083 kernel: raid6: sse2x2 xor() 6076 MB/s Nov 1 00:39:15.693077 kernel: raid6: sse2x1 gen() 9335 MB/s Nov 1 00:39:15.711423 kernel: raid6: sse2x1 xor() 4601 MB/s Nov 1 00:39:15.711497 kernel: raid6: using algorithm avx512x2 gen() 18077 MB/s Nov 1 00:39:15.711517 kernel: raid6: .... xor() 24046 MB/s, rmw enabled Nov 1 00:39:15.712537 kernel: raid6: using avx512x2 recovery algorithm Nov 1 00:39:15.728078 kernel: xor: automatically using best checksumming function avx Nov 1 00:39:15.843083 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Nov 1 00:39:15.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.853000 audit: BPF prog-id=7 op=LOAD Nov 1 00:39:15.853000 audit: BPF prog-id=8 op=LOAD Nov 1 00:39:15.852525 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:39:15.854064 systemd[1]: Starting systemd-udevd.service... Nov 1 00:39:15.868252 systemd-udevd[384]: Using default interface naming scheme 'v252'. Nov 1 00:39:15.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.873614 systemd[1]: Started systemd-udevd.service. Nov 1 00:39:15.875402 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:39:15.895964 dracut-pre-trigger[389]: rd.md=0: removing MD RAID activation Nov 1 00:39:15.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:15.929404 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:39:15.930638 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:39:15.976411 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:39:15.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:16.028229 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:39:16.046072 kernel: AVX2 version of gcm_enc/dec engaged. Nov 1 00:39:16.046135 kernel: AES CTR mode by8 optimization enabled Nov 1 00:39:16.078714 kernel: ena 0000:00:05.0: ENA device version: 0.10 Nov 1 00:39:16.098121 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Nov 1 00:39:16.098298 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Nov 1 00:39:16.098447 kernel: nvme nvme0: pci function 0000:00:04.0 Nov 1 00:39:16.098633 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Nov 1 00:39:16.098654 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80400000, mac addr 06:d5:fb:5b:84:4d Nov 1 00:39:16.107215 kernel: nvme nvme0: 2/0/0 default/read/poll queues Nov 1 00:39:16.117718 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Nov 1 00:39:16.117896 kernel: GPT:9289727 != 33554431 Nov 1 00:39:16.118060 kernel: GPT:Alternate GPT header not at the end of the disk. Nov 1 00:39:16.118084 kernel: GPT:9289727 != 33554431 Nov 1 00:39:16.119000 kernel: GPT: Use GNU Parted to correct GPT errors. Nov 1 00:39:16.120429 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:39:16.126246 (udev-worker)[436]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:39:16.181076 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (438) Nov 1 00:39:16.219189 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:39:16.233669 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:39:16.270363 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:39:16.272751 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:39:16.278375 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:39:16.284739 systemd[1]: Starting disk-uuid.service... Nov 1 00:39:16.291795 disk-uuid[593]: Primary Header is updated. Nov 1 00:39:16.291795 disk-uuid[593]: Secondary Entries is updated. Nov 1 00:39:16.291795 disk-uuid[593]: Secondary Header is updated. Nov 1 00:39:16.301072 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:39:16.306100 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:39:16.313078 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:39:17.310892 disk-uuid[594]: The operation has completed successfully. Nov 1 00:39:17.311710 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:39:17.426816 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:39:17.426938 systemd[1]: Finished disk-uuid.service. Nov 1 00:39:17.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.433846 systemd[1]: Starting verity-setup.service... Nov 1 00:39:17.453071 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Nov 1 00:39:17.571524 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:39:17.573744 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:39:17.576899 systemd[1]: Finished verity-setup.service. Nov 1 00:39:17.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.683275 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:39:17.684025 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:39:17.684777 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:39:17.686152 systemd[1]: Starting ignition-setup.service... Nov 1 00:39:17.688993 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:39:17.713100 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:39:17.713268 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:39:17.713287 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:39:17.747078 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:39:17.761980 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:39:17.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.773476 systemd[1]: Finished ignition-setup.service. Nov 1 00:39:17.775680 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:39:17.779215 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:39:17.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.781000 audit: BPF prog-id=9 op=LOAD Nov 1 00:39:17.782697 systemd[1]: Starting systemd-networkd.service... Nov 1 00:39:17.806708 systemd-networkd[1106]: lo: Link UP Nov 1 00:39:17.806721 systemd-networkd[1106]: lo: Gained carrier Nov 1 00:39:17.807403 systemd-networkd[1106]: Enumeration completed Nov 1 00:39:17.807536 systemd[1]: Started systemd-networkd.service. Nov 1 00:39:17.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.807858 systemd-networkd[1106]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:39:17.811142 systemd-networkd[1106]: eth0: Link UP Nov 1 00:39:17.811147 systemd-networkd[1106]: eth0: Gained carrier Nov 1 00:39:17.812112 systemd[1]: Reached target network.target. Nov 1 00:39:17.815032 systemd[1]: Starting iscsiuio.service... Nov 1 00:39:17.822865 systemd[1]: Started iscsiuio.service. Nov 1 00:39:17.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.824180 systemd-networkd[1106]: eth0: DHCPv4 address 172.31.20.5/20, gateway 172.31.16.1 acquired from 172.31.16.1 Nov 1 00:39:17.826598 systemd[1]: Starting iscsid.service... Nov 1 00:39:17.830842 iscsid[1111]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:39:17.830842 iscsid[1111]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:39:17.830842 iscsid[1111]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:39:17.830842 iscsid[1111]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:39:17.830842 iscsid[1111]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:39:17.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.841365 iscsid[1111]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:39:17.833044 systemd[1]: Started iscsid.service. Nov 1 00:39:17.837504 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:39:17.852193 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:39:17.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.853019 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:39:17.854390 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:39:17.855617 systemd[1]: Reached target remote-fs.target. Nov 1 00:39:17.858207 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:39:17.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:17.868361 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:39:18.439155 ignition[1104]: Ignition 2.14.0 Nov 1 00:39:18.439170 ignition[1104]: Stage: fetch-offline Nov 1 00:39:18.439328 ignition[1104]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:39:18.439393 ignition[1104]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:39:18.456700 ignition[1104]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:39:18.457532 ignition[1104]: Ignition finished successfully Nov 1 00:39:18.459001 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:39:18.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:18.461037 systemd[1]: Starting ignition-fetch.service... Nov 1 00:39:18.470461 ignition[1130]: Ignition 2.14.0 Nov 1 00:39:18.470474 ignition[1130]: Stage: fetch Nov 1 00:39:18.470674 ignition[1130]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:39:18.470706 ignition[1130]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:39:18.478721 ignition[1130]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:39:18.479642 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:39:18.491365 ignition[1130]: INFO : PUT result: OK Nov 1 00:39:18.495473 ignition[1130]: DEBUG : parsed url from cmdline: "" Nov 1 00:39:18.495473 ignition[1130]: INFO : no config URL provided Nov 1 00:39:18.495473 ignition[1130]: INFO : reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:39:18.495473 ignition[1130]: INFO : no config at "/usr/lib/ignition/user.ign" Nov 1 00:39:18.499745 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:39:18.499745 ignition[1130]: INFO : PUT result: OK Nov 1 00:39:18.499745 ignition[1130]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Nov 1 00:39:18.499745 ignition[1130]: INFO : GET result: OK Nov 1 00:39:18.499745 ignition[1130]: DEBUG : parsing config with SHA512: c4f1a92902cbf66e4024162582ecb9b16fd5e13850ef4d72be338577010ef6863d6add33e87c1f2ee5c905f4de2bd4b6ba4d5513e77608dfe85aa98e28ff8d8a Nov 1 00:39:18.505491 unknown[1130]: fetched base config from "system" Nov 1 00:39:18.505506 unknown[1130]: fetched base config from "system" Nov 1 00:39:18.507119 ignition[1130]: fetch: fetch complete Nov 1 00:39:18.505520 unknown[1130]: fetched user config from "aws" Nov 1 00:39:18.507128 ignition[1130]: fetch: fetch passed Nov 1 00:39:18.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:18.509306 systemd[1]: Finished ignition-fetch.service. Nov 1 00:39:18.507200 ignition[1130]: Ignition finished successfully Nov 1 00:39:18.511529 systemd[1]: Starting ignition-kargs.service... Nov 1 00:39:18.523398 ignition[1136]: Ignition 2.14.0 Nov 1 00:39:18.523412 ignition[1136]: Stage: kargs Nov 1 00:39:18.523627 ignition[1136]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:39:18.523661 ignition[1136]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:39:18.531734 ignition[1136]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:39:18.532523 ignition[1136]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:39:18.533983 ignition[1136]: INFO : PUT result: OK Nov 1 00:39:18.536966 ignition[1136]: kargs: kargs passed Nov 1 00:39:18.537036 ignition[1136]: Ignition finished successfully Nov 1 00:39:18.539525 systemd[1]: Finished ignition-kargs.service. Nov 1 00:39:18.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:18.541350 systemd[1]: Starting ignition-disks.service... Nov 1 00:39:18.565406 ignition[1142]: Ignition 2.14.0 Nov 1 00:39:18.565423 ignition[1142]: Stage: disks Nov 1 00:39:18.565651 ignition[1142]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:39:18.565684 ignition[1142]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:39:18.598983 ignition[1142]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:39:18.599860 ignition[1142]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:39:18.601576 ignition[1142]: INFO : PUT result: OK Nov 1 00:39:18.606228 ignition[1142]: disks: disks passed Nov 1 00:39:18.606911 ignition[1142]: Ignition finished successfully Nov 1 00:39:18.609342 systemd[1]: Finished ignition-disks.service. Nov 1 00:39:18.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:18.610306 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:39:18.611243 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:39:18.612205 systemd[1]: Reached target local-fs.target. Nov 1 00:39:18.613249 systemd[1]: Reached target sysinit.target. Nov 1 00:39:18.614559 systemd[1]: Reached target basic.target. Nov 1 00:39:18.616698 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:39:18.646854 systemd-fsck[1150]: ROOT: clean, 637/553520 files, 56032/553472 blocks Nov 1 00:39:18.649915 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:39:18.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:18.651355 systemd[1]: Mounting sysroot.mount... Nov 1 00:39:18.673079 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:39:18.675157 systemd[1]: Mounted sysroot.mount. Nov 1 00:39:18.677338 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:39:18.687779 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:39:18.690983 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Nov 1 00:39:18.691606 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:39:18.691645 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:39:18.694653 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:39:18.737667 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:39:18.741353 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:39:18.754621 initrd-setup-root[1172]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:39:18.762082 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1167) Nov 1 00:39:18.767130 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:39:18.767209 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:39:18.767229 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:39:18.770623 initrd-setup-root[1180]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:39:18.775836 initrd-setup-root[1204]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:39:18.779817 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:39:18.783141 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:39:18.785290 initrd-setup-root[1214]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:39:18.974510 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:39:18.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:18.976293 systemd[1]: Starting ignition-mount.service... Nov 1 00:39:18.977822 systemd[1]: Starting sysroot-boot.service... Nov 1 00:39:18.992752 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Nov 1 00:39:18.992963 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Nov 1 00:39:19.020505 ignition[1233]: INFO : Ignition 2.14.0 Nov 1 00:39:19.020505 ignition[1233]: INFO : Stage: mount Nov 1 00:39:19.022694 ignition[1233]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:39:19.022694 ignition[1233]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:39:19.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:19.034121 ignition[1233]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:39:19.034121 ignition[1233]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:39:19.034121 ignition[1233]: INFO : PUT result: OK Nov 1 00:39:19.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:19.032784 systemd[1]: Finished sysroot-boot.service. Nov 1 00:39:19.040323 ignition[1233]: INFO : mount: mount passed Nov 1 00:39:19.040323 ignition[1233]: INFO : Ignition finished successfully Nov 1 00:39:19.036398 systemd[1]: Finished ignition-mount.service. Nov 1 00:39:19.038328 systemd[1]: Starting ignition-files.service... Nov 1 00:39:19.048162 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:39:19.067073 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1242) Nov 1 00:39:19.071005 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:39:19.071080 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:39:19.071098 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:39:19.089093 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:39:19.092289 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:39:19.103943 ignition[1261]: INFO : Ignition 2.14.0 Nov 1 00:39:19.103943 ignition[1261]: INFO : Stage: files Nov 1 00:39:19.106362 ignition[1261]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:39:19.106362 ignition[1261]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:39:19.112795 ignition[1261]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:39:19.113775 ignition[1261]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:39:19.114502 ignition[1261]: INFO : PUT result: OK Nov 1 00:39:19.118923 ignition[1261]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:39:19.124844 ignition[1261]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:39:19.124844 ignition[1261]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:39:19.128536 ignition[1261]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:39:19.130043 ignition[1261]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:39:19.132479 unknown[1261]: wrote ssh authorized keys file for user: core Nov 1 00:39:19.133516 ignition[1261]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:39:19.134785 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Nov 1 00:39:19.134785 ignition[1261]: INFO : GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Nov 1 00:39:19.206726 ignition[1261]: INFO : GET result: OK Nov 1 00:39:19.435725 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Nov 1 00:39:19.438192 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Nov 1 00:39:19.438192 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:39:19.451227 ignition[1261]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1886093857" Nov 1 00:39:19.451227 ignition[1261]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1886093857": device or resource busy Nov 1 00:39:19.451227 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1886093857", trying btrfs: device or resource busy Nov 1 00:39:19.451227 ignition[1261]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1886093857" Nov 1 00:39:19.464307 ignition[1261]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1886093857" Nov 1 00:39:19.464307 ignition[1261]: INFO : op(3): [started] unmounting "/mnt/oem1886093857" Nov 1 00:39:19.464307 ignition[1261]: INFO : op(3): [finished] unmounting "/mnt/oem1886093857" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:39:19.464307 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Nov 1 00:39:19.513807 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:39:19.513807 ignition[1261]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem199060123" Nov 1 00:39:19.513807 ignition[1261]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem199060123": device or resource busy Nov 1 00:39:19.513807 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem199060123", trying btrfs: device or resource busy Nov 1 00:39:19.513807 ignition[1261]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem199060123" Nov 1 00:39:19.513807 ignition[1261]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem199060123" Nov 1 00:39:19.513807 ignition[1261]: INFO : op(6): [started] unmounting "/mnt/oem199060123" Nov 1 00:39:19.513807 ignition[1261]: INFO : op(6): [finished] unmounting "/mnt/oem199060123" Nov 1 00:39:19.513807 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Nov 1 00:39:19.513807 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Nov 1 00:39:19.513807 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:39:19.513807 ignition[1261]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem946874363" Nov 1 00:39:19.513807 ignition[1261]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem946874363": device or resource busy Nov 1 00:39:19.513807 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem946874363", trying btrfs: device or resource busy Nov 1 00:39:19.513807 ignition[1261]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem946874363" Nov 1 00:39:19.513807 ignition[1261]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem946874363" Nov 1 00:39:19.513807 ignition[1261]: INFO : op(9): [started] unmounting "/mnt/oem946874363" Nov 1 00:39:19.513807 ignition[1261]: INFO : op(9): [finished] unmounting "/mnt/oem946874363" Nov 1 00:39:19.513807 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Nov 1 00:39:19.513807 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:39:19.513807 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:39:19.541208 ignition[1261]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2096527004" Nov 1 00:39:19.541208 ignition[1261]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2096527004": device or resource busy Nov 1 00:39:19.541208 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2096527004", trying btrfs: device or resource busy Nov 1 00:39:19.541208 ignition[1261]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2096527004" Nov 1 00:39:19.541208 ignition[1261]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2096527004" Nov 1 00:39:19.541208 ignition[1261]: INFO : op(c): [started] unmounting "/mnt/oem2096527004" Nov 1 00:39:19.541208 ignition[1261]: INFO : op(c): [finished] unmounting "/mnt/oem2096527004" Nov 1 00:39:19.541208 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:39:19.541208 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:39:19.541208 ignition[1261]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Nov 1 00:39:19.716240 systemd-networkd[1106]: eth0: Gained IPv6LL Nov 1 00:39:19.816175 ignition[1261]: INFO : GET result: OK Nov 1 00:39:20.609980 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:39:20.611790 ignition[1261]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Nov 1 00:39:20.611790 ignition[1261]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Nov 1 00:39:20.611790 ignition[1261]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Nov 1 00:39:20.611790 ignition[1261]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(12): [started] processing unit "nvidia.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(12): [finished] processing unit "nvidia.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:39:20.617527 ignition[1261]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:39:20.667994 kernel: kauditd_printk_skb: 26 callbacks suppressed Nov 1 00:39:20.668032 kernel: audit: type=1130 audit(1761957560.624:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.668061 kernel: audit: type=1130 audit(1761957560.643:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.668074 kernel: audit: type=1131 audit(1761957560.643:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.668085 kernel: audit: type=1130 audit(1761957560.655:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.668247 ignition[1261]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:39:20.668247 ignition[1261]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:39:20.668247 ignition[1261]: INFO : files: files passed Nov 1 00:39:20.668247 ignition[1261]: INFO : Ignition finished successfully Nov 1 00:39:20.622466 systemd[1]: Finished ignition-files.service. Nov 1 00:39:20.628254 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:39:20.674369 initrd-setup-root-after-ignition[1286]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:39:20.635068 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:39:20.635926 systemd[1]: Starting ignition-quench.service... Nov 1 00:39:20.641645 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:39:20.641748 systemd[1]: Finished ignition-quench.service. Nov 1 00:39:20.653611 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:39:20.655825 systemd[1]: Reached target ignition-complete.target. Nov 1 00:39:20.663994 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:39:20.680882 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:39:20.692405 kernel: audit: type=1130 audit(1761957560.682:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.692441 kernel: audit: type=1131 audit(1761957560.682:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.680978 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:39:20.682564 systemd[1]: Reached target initrd-fs.target. Nov 1 00:39:20.693103 systemd[1]: Reached target initrd.target. Nov 1 00:39:20.694646 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:39:20.695595 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:39:20.708420 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:39:20.710430 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:39:20.717784 kernel: audit: type=1130 audit(1761957560.709:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.728722 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:39:20.729698 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:39:20.731070 systemd[1]: Stopped target timers.target. Nov 1 00:39:20.732302 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:39:20.739029 kernel: audit: type=1131 audit(1761957560.733:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.732472 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:39:20.733976 systemd[1]: Stopped target initrd.target. Nov 1 00:39:20.739925 systemd[1]: Stopped target basic.target. Nov 1 00:39:20.741410 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:39:20.742659 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:39:20.743861 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:39:20.745091 systemd[1]: Stopped target remote-fs.target. Nov 1 00:39:20.746390 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:39:20.747626 systemd[1]: Stopped target sysinit.target. Nov 1 00:39:20.748840 systemd[1]: Stopped target local-fs.target. Nov 1 00:39:20.750181 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:39:20.751377 systemd[1]: Stopped target swap.target. Nov 1 00:39:20.758910 kernel: audit: type=1131 audit(1761957560.753:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.752483 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:39:20.752691 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:39:20.766308 kernel: audit: type=1131 audit(1761957560.760:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.754064 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:39:20.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.759760 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:39:20.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.759980 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:39:20.761372 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:39:20.761601 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:39:20.767257 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:39:20.767463 systemd[1]: Stopped ignition-files.service. Nov 1 00:39:20.769965 systemd[1]: Stopping ignition-mount.service... Nov 1 00:39:20.778160 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:39:20.780268 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:39:20.781326 ignition[1299]: INFO : Ignition 2.14.0 Nov 1 00:39:20.781326 ignition[1299]: INFO : Stage: umount Nov 1 00:39:20.783799 ignition[1299]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:39:20.783799 ignition[1299]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:39:20.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.785890 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:39:20.787302 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:39:20.797786 ignition[1299]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:39:20.797786 ignition[1299]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:39:20.797786 ignition[1299]: INFO : PUT result: OK Nov 1 00:39:20.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.787497 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:39:20.807591 ignition[1299]: INFO : umount: umount passed Nov 1 00:39:20.807591 ignition[1299]: INFO : Ignition finished successfully Nov 1 00:39:20.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.796759 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:39:20.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.796875 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:39:20.801945 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:39:20.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.802085 systemd[1]: Stopped ignition-mount.service. Nov 1 00:39:20.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.808863 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:39:20.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.808935 systemd[1]: Stopped ignition-disks.service. Nov 1 00:39:20.812879 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:39:20.812951 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:39:20.814999 systemd[1]: ignition-fetch.service: Deactivated successfully. Nov 1 00:39:20.816128 systemd[1]: Stopped ignition-fetch.service. Nov 1 00:39:20.816769 systemd[1]: Stopped target network.target. Nov 1 00:39:20.817718 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:39:20.817786 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:39:20.818797 systemd[1]: Stopped target paths.target. Nov 1 00:39:20.823268 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:39:20.827124 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:39:20.829076 systemd[1]: Stopped target slices.target. Nov 1 00:39:20.830042 systemd[1]: Stopped target sockets.target. Nov 1 00:39:20.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.830886 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:39:20.830930 systemd[1]: Closed iscsid.socket. Nov 1 00:39:20.832029 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:39:20.832090 systemd[1]: Closed iscsiuio.socket. Nov 1 00:39:20.833085 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:39:20.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.833233 systemd[1]: Stopped ignition-setup.service. Nov 1 00:39:20.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.834460 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:39:20.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.844000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:39:20.835566 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:39:20.838139 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:39:20.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.838939 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:39:20.839080 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:39:20.839110 systemd-networkd[1106]: eth0: DHCPv6 lease lost Nov 1 00:39:20.851000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:39:20.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.841967 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:39:20.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.842114 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:39:20.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.843563 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:39:20.843695 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:39:20.845016 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:39:20.845237 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:39:20.845924 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:39:20.845987 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:39:20.848145 systemd[1]: Stopping network-cleanup.service... Nov 1 00:39:20.850488 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:39:20.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.850568 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:39:20.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.851721 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:39:20.851786 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:39:20.852987 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:39:20.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.853090 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:39:20.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.854454 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:39:20.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.862832 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:39:20.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:20.867595 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:39:20.867736 systemd[1]: Stopped network-cleanup.service. Nov 1 00:39:20.869012 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:39:20.869399 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:39:20.870653 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:39:20.870709 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:39:20.871596 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:39:20.871643 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:39:20.872676 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:39:20.872739 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:39:20.873917 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:39:20.873972 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:39:20.875144 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:39:20.875199 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:39:20.877376 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:39:20.882991 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Nov 1 00:39:20.883115 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Nov 1 00:39:20.884350 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:39:20.884418 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:39:20.885467 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:39:20.885522 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:39:20.887001 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Nov 1 00:39:20.887485 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:39:20.887572 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:39:20.888228 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:39:20.891225 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:39:20.906590 systemd[1]: Switching root. Nov 1 00:39:20.933117 systemd-journald[185]: Received SIGTERM from PID 1 (n/a). Nov 1 00:39:20.933217 iscsid[1111]: iscsid shutting down. Nov 1 00:39:20.934409 systemd-journald[185]: Journal stopped Nov 1 00:39:26.085322 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:39:26.085398 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:39:26.085418 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:39:26.085440 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:39:26.085458 kernel: SELinux: policy capability open_perms=1 Nov 1 00:39:26.085475 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:39:26.085492 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:39:26.085515 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:39:26.085532 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:39:26.085549 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:39:26.085566 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:39:26.085595 systemd[1]: Successfully loaded SELinux policy in 101.369ms. Nov 1 00:39:26.085629 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.306ms. Nov 1 00:39:26.085648 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:39:26.085665 systemd[1]: Detected virtualization amazon. Nov 1 00:39:26.085683 systemd[1]: Detected architecture x86-64. Nov 1 00:39:26.085703 systemd[1]: Detected first boot. Nov 1 00:39:26.085721 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:39:26.085741 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:39:26.085764 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:39:26.085785 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:39:26.085807 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:39:26.085826 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:39:26.085856 kernel: kauditd_printk_skb: 47 callbacks suppressed Nov 1 00:39:26.085875 kernel: audit: type=1334 audit(1761957565.765:87): prog-id=12 op=LOAD Nov 1 00:39:26.085892 kernel: audit: type=1334 audit(1761957565.765:88): prog-id=3 op=UNLOAD Nov 1 00:39:26.085915 kernel: audit: type=1334 audit(1761957565.767:89): prog-id=13 op=LOAD Nov 1 00:39:26.085934 kernel: audit: type=1334 audit(1761957565.769:90): prog-id=14 op=LOAD Nov 1 00:39:26.085953 kernel: audit: type=1334 audit(1761957565.769:91): prog-id=4 op=UNLOAD Nov 1 00:39:26.085973 kernel: audit: type=1334 audit(1761957565.769:92): prog-id=5 op=UNLOAD Nov 1 00:39:26.085992 kernel: audit: type=1334 audit(1761957565.771:93): prog-id=15 op=LOAD Nov 1 00:39:26.086011 kernel: audit: type=1334 audit(1761957565.771:94): prog-id=12 op=UNLOAD Nov 1 00:39:26.086030 kernel: audit: type=1334 audit(1761957565.779:95): prog-id=16 op=LOAD Nov 1 00:39:26.086062 kernel: audit: type=1334 audit(1761957565.783:96): prog-id=17 op=LOAD Nov 1 00:39:26.086085 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:39:26.086106 systemd[1]: Stopped iscsiuio.service. Nov 1 00:39:26.086126 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:39:26.086147 systemd[1]: Stopped iscsid.service. Nov 1 00:39:26.086167 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:39:26.086187 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:39:26.086208 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:39:26.086232 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:39:26.086254 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:39:26.086275 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Nov 1 00:39:26.086295 systemd[1]: Created slice system-getty.slice. Nov 1 00:39:26.086316 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:39:26.086336 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:39:26.086357 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:39:26.086379 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:39:26.086406 systemd[1]: Created slice user.slice. Nov 1 00:39:26.086430 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:39:26.086450 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:39:26.086470 systemd[1]: Set up automount boot.automount. Nov 1 00:39:26.086491 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:39:26.086511 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:39:26.086533 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:39:26.086553 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:39:26.086576 systemd[1]: Reached target integritysetup.target. Nov 1 00:39:26.086609 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:39:26.086632 systemd[1]: Reached target remote-fs.target. Nov 1 00:39:26.086654 systemd[1]: Reached target slices.target. Nov 1 00:39:26.086674 systemd[1]: Reached target swap.target. Nov 1 00:39:26.086695 systemd[1]: Reached target torcx.target. Nov 1 00:39:26.086716 systemd[1]: Reached target veritysetup.target. Nov 1 00:39:26.086736 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:39:26.086756 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:39:26.086775 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:39:26.086794 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:39:26.086814 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:39:26.086833 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:39:26.086851 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:39:26.086869 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:39:26.086888 systemd[1]: Mounting media.mount... Nov 1 00:39:26.086907 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:39:26.086929 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:39:26.086948 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:39:26.086967 systemd[1]: Mounting tmp.mount... Nov 1 00:39:26.086985 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:39:26.087004 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:39:26.087023 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:39:26.087042 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:39:26.087072 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:39:26.087091 systemd[1]: Starting modprobe@drm.service... Nov 1 00:39:26.087112 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:39:26.087131 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:39:26.087149 systemd[1]: Starting modprobe@loop.service... Nov 1 00:39:26.087168 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:39:26.087187 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:39:26.087204 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:39:26.087224 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:39:26.087242 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:39:26.087261 systemd[1]: Stopped systemd-journald.service. Nov 1 00:39:26.087282 systemd[1]: Starting systemd-journald.service... Nov 1 00:39:26.087302 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:39:26.087320 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:39:26.087338 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:39:26.087359 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:39:26.087377 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:39:26.087396 systemd[1]: Stopped verity-setup.service. Nov 1 00:39:26.087414 kernel: fuse: init (API version 7.34) Nov 1 00:39:26.087434 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:39:26.087456 kernel: loop: module loaded Nov 1 00:39:26.087473 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:39:26.087491 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:39:26.087510 systemd[1]: Mounted media.mount. Nov 1 00:39:26.087529 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:39:26.087547 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:39:26.087565 systemd[1]: Mounted tmp.mount. Nov 1 00:39:26.087584 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:39:26.087602 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:39:26.087624 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:39:26.087642 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:39:26.087661 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:39:26.087680 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:39:26.087698 systemd[1]: Finished modprobe@drm.service. Nov 1 00:39:26.087720 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:39:26.087739 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:39:26.087759 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:39:26.087778 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:39:26.087797 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:39:26.091737 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:39:26.091778 systemd-journald[1411]: Journal started Nov 1 00:39:26.091854 systemd-journald[1411]: Runtime Journal (/run/log/journal/ec205688d870c4fa617e09bb025882e5) is 4.8M, max 38.3M, 33.5M free. Nov 1 00:39:21.666000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:39:21.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:39:21.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:39:21.838000 audit: BPF prog-id=10 op=LOAD Nov 1 00:39:21.838000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:39:21.838000 audit: BPF prog-id=11 op=LOAD Nov 1 00:39:21.838000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:39:21.992000 audit[1332]: AVC avc: denied { associate } for pid=1332 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:39:21.992000 audit[1332]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8a2 a1=c0000cede0 a2=c0000d70c0 a3=32 items=0 ppid=1315 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:21.992000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:39:21.995000 audit[1332]: AVC avc: denied { associate } for pid=1332 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:39:21.995000 audit[1332]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d979 a2=1ed a3=0 items=2 ppid=1315 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:21.995000 audit: CWD cwd="/" Nov 1 00:39:21.995000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:21.995000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:21.995000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:39:25.765000 audit: BPF prog-id=12 op=LOAD Nov 1 00:39:25.765000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:39:25.767000 audit: BPF prog-id=13 op=LOAD Nov 1 00:39:25.769000 audit: BPF prog-id=14 op=LOAD Nov 1 00:39:25.769000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:39:25.769000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:39:25.771000 audit: BPF prog-id=15 op=LOAD Nov 1 00:39:25.771000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:39:25.779000 audit: BPF prog-id=16 op=LOAD Nov 1 00:39:25.783000 audit: BPF prog-id=17 op=LOAD Nov 1 00:39:25.783000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:39:25.783000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:39:25.785000 audit: BPF prog-id=18 op=LOAD Nov 1 00:39:25.785000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:39:25.787000 audit: BPF prog-id=19 op=LOAD Nov 1 00:39:25.787000 audit: BPF prog-id=20 op=LOAD Nov 1 00:39:25.787000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:39:25.787000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:39:25.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.793000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:39:25.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.958000 audit: BPF prog-id=21 op=LOAD Nov 1 00:39:25.958000 audit: BPF prog-id=22 op=LOAD Nov 1 00:39:25.958000 audit: BPF prog-id=23 op=LOAD Nov 1 00:39:26.093910 systemd[1]: Finished modprobe@loop.service. Nov 1 00:39:25.958000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:39:25.958000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:39:26.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.083000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:39:26.083000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffcaceb86f0 a2=4000 a3=7ffcaceb878c items=0 ppid=1 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:26.083000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:39:26.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:25.763706 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:39:21.977645 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:39:25.763721 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Nov 1 00:39:21.978637 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:39:25.787732 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:39:21.978659 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:39:26.098677 systemd[1]: Started systemd-journald.service. Nov 1 00:39:26.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:21.978693 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:39:21.978704 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:39:21.978739 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:39:21.978752 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:39:21.978959 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:39:21.979001 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:39:21.979013 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:39:21.981521 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:39:21.981568 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:39:21.981599 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:39:21.981615 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:39:21.981645 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:39:21.981659 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:21Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:39:25.217112 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:25Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:39:25.217430 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:25Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:39:25.217719 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:25Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:39:25.217951 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:25Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:39:25.218004 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:25Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:39:25.218090 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-11-01T00:39:25Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:39:26.101309 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:39:26.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.103752 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:39:26.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.105719 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:39:26.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.107903 systemd[1]: Reached target network-pre.target. Nov 1 00:39:26.111161 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:39:26.113980 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:39:26.119752 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:39:26.122878 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:39:26.125983 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:39:26.127357 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:39:26.129329 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:39:26.130717 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:39:26.132530 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:39:26.139004 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:39:26.151266 systemd-journald[1411]: Time spent on flushing to /var/log/journal/ec205688d870c4fa617e09bb025882e5 is 45.268ms for 1231 entries. Nov 1 00:39:26.151266 systemd-journald[1411]: System Journal (/var/log/journal/ec205688d870c4fa617e09bb025882e5) is 8.0M, max 195.6M, 187.6M free. Nov 1 00:39:26.217598 systemd-journald[1411]: Received client request to flush runtime journal. Nov 1 00:39:26.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.145184 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:39:26.147516 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:39:26.218193 udevadm[1450]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Nov 1 00:39:26.157120 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:39:26.158196 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:39:26.177033 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:39:26.179578 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:39:26.195005 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:39:26.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.219100 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:39:26.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.231781 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:39:26.234344 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:39:26.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.322935 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:39:26.831998 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:39:26.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.833000 audit: BPF prog-id=24 op=LOAD Nov 1 00:39:26.833000 audit: BPF prog-id=25 op=LOAD Nov 1 00:39:26.833000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:39:26.833000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:39:26.834252 systemd[1]: Starting systemd-udevd.service... Nov 1 00:39:26.854946 systemd-udevd[1454]: Using default interface naming scheme 'v252'. Nov 1 00:39:26.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:26.917000 audit: BPF prog-id=26 op=LOAD Nov 1 00:39:26.914986 systemd[1]: Started systemd-udevd.service. Nov 1 00:39:26.918680 systemd[1]: Starting systemd-networkd.service... Nov 1 00:39:26.928000 audit: BPF prog-id=27 op=LOAD Nov 1 00:39:26.928000 audit: BPF prog-id=28 op=LOAD Nov 1 00:39:26.928000 audit: BPF prog-id=29 op=LOAD Nov 1 00:39:26.929976 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:39:26.979758 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Nov 1 00:39:26.992887 systemd[1]: Started systemd-userdbd.service. Nov 1 00:39:26.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.013611 (udev-worker)[1467]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:39:27.060099 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Nov 1 00:39:27.090076 kernel: ACPI: button: Power Button [PWRF] Nov 1 00:39:27.112098 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Nov 1 00:39:27.103000 audit[1465]: AVC avc: denied { confidentiality } for pid=1465 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:39:27.103000 audit[1465]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=555a1785b430 a1=338ec a2=7fe104874bc5 a3=5 items=110 ppid=1454 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:27.103000 audit: CWD cwd="/" Nov 1 00:39:27.103000 audit: PATH item=0 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=1 name=(null) inode=13850 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=2 name=(null) inode=13850 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=3 name=(null) inode=13851 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=4 name=(null) inode=13850 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=5 name=(null) inode=13852 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=6 name=(null) inode=13850 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=7 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=8 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=9 name=(null) inode=13854 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=10 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=11 name=(null) inode=13855 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=12 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=13 name=(null) inode=13856 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=14 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=15 name=(null) inode=13857 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=16 name=(null) inode=13853 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=17 name=(null) inode=13858 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=18 name=(null) inode=13850 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=19 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=20 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=21 name=(null) inode=13860 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=22 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=23 name=(null) inode=13861 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=24 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=25 name=(null) inode=13862 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=26 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=27 name=(null) inode=13863 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=28 name=(null) inode=13859 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=29 name=(null) inode=13864 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=30 name=(null) inode=13850 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=31 name=(null) inode=13865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=32 name=(null) inode=13865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=33 name=(null) inode=13866 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=34 name=(null) inode=13865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=35 name=(null) inode=13867 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=36 name=(null) inode=13865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=37 name=(null) inode=13868 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=38 name=(null) inode=13865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=39 name=(null) inode=13869 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=40 name=(null) inode=13865 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=41 name=(null) inode=13870 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=42 name=(null) inode=13850 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=43 name=(null) inode=13871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=44 name=(null) inode=13871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=45 name=(null) inode=13872 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=46 name=(null) inode=13871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=47 name=(null) inode=13873 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=48 name=(null) inode=13871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=49 name=(null) inode=13874 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=50 name=(null) inode=13871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=51 name=(null) inode=13875 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=52 name=(null) inode=13871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=53 name=(null) inode=13876 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=54 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=55 name=(null) inode=13877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=56 name=(null) inode=13877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=57 name=(null) inode=13878 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=58 name=(null) inode=13877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=59 name=(null) inode=13879 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=60 name=(null) inode=13877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=61 name=(null) inode=13880 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=62 name=(null) inode=13880 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=63 name=(null) inode=13881 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=64 name=(null) inode=13880 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=65 name=(null) inode=13882 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=66 name=(null) inode=13880 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=67 name=(null) inode=13883 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=68 name=(null) inode=13880 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=69 name=(null) inode=13884 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=70 name=(null) inode=13880 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=71 name=(null) inode=13885 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=72 name=(null) inode=13877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=73 name=(null) inode=13886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=74 name=(null) inode=13886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=75 name=(null) inode=13887 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=76 name=(null) inode=13886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=77 name=(null) inode=13888 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=78 name=(null) inode=13886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=79 name=(null) inode=13889 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=80 name=(null) inode=13886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=81 name=(null) inode=13890 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=82 name=(null) inode=13886 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=83 name=(null) inode=13891 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=84 name=(null) inode=13877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=85 name=(null) inode=13892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=86 name=(null) inode=13892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=87 name=(null) inode=13893 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=88 name=(null) inode=13892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=89 name=(null) inode=13894 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=90 name=(null) inode=13892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=91 name=(null) inode=13895 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=92 name=(null) inode=13892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=93 name=(null) inode=13896 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=94 name=(null) inode=13892 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=95 name=(null) inode=13897 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=96 name=(null) inode=13877 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=97 name=(null) inode=13898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=98 name=(null) inode=13898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=99 name=(null) inode=13899 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=100 name=(null) inode=13898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=101 name=(null) inode=13900 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=102 name=(null) inode=13898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=103 name=(null) inode=13901 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=104 name=(null) inode=13898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=105 name=(null) inode=13902 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=106 name=(null) inode=13898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=107 name=(null) inode=13903 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PATH item=109 name=(null) inode=13904 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:39:27.103000 audit: PROCTITLE proctitle="(udev-worker)" Nov 1 00:39:27.144071 kernel: ACPI: button: Sleep Button [SLPF] Nov 1 00:39:27.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.151244 systemd-networkd[1462]: lo: Link UP Nov 1 00:39:27.151257 systemd-networkd[1462]: lo: Gained carrier Nov 1 00:39:27.151848 systemd-networkd[1462]: Enumeration completed Nov 1 00:39:27.151981 systemd[1]: Started systemd-networkd.service. Nov 1 00:39:27.154606 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:39:27.155263 systemd-networkd[1462]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:39:27.161572 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:39:27.161120 systemd-networkd[1462]: eth0: Link UP Nov 1 00:39:27.161302 systemd-networkd[1462]: eth0: Gained carrier Nov 1 00:39:27.173164 kernel: piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr Nov 1 00:39:27.188807 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Nov 1 00:39:27.173628 systemd-networkd[1462]: eth0: DHCPv4 address 172.31.20.5/20, gateway 172.31.16.1 acquired from 172.31.16.1 Nov 1 00:39:27.194079 kernel: mousedev: PS/2 mouse device common for all mice Nov 1 00:39:27.297950 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:39:27.300747 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:39:27.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.303006 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:39:27.375996 lvm[1568]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:39:27.403025 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:39:27.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.403733 systemd[1]: Reached target cryptsetup.target. Nov 1 00:39:27.405566 systemd[1]: Starting lvm2-activation.service... Nov 1 00:39:27.410562 lvm[1569]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:39:27.432402 systemd[1]: Finished lvm2-activation.service. Nov 1 00:39:27.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.433064 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:39:27.433716 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:39:27.433748 systemd[1]: Reached target local-fs.target. Nov 1 00:39:27.434225 systemd[1]: Reached target machines.target. Nov 1 00:39:27.435891 systemd[1]: Starting ldconfig.service... Nov 1 00:39:27.437466 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:39:27.437557 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:39:27.438731 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:39:27.440485 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:39:27.445247 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:39:27.447020 systemd[1]: Starting systemd-sysext.service... Nov 1 00:39:27.447825 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1571 (bootctl) Nov 1 00:39:27.449042 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:39:27.461314 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:39:27.466579 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:39:27.466837 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:39:27.477354 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:39:27.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.487077 kernel: loop0: detected capacity change from 0 to 224512 Nov 1 00:39:27.591710 systemd-fsck[1581]: fsck.fat 4.2 (2021-01-31) Nov 1 00:39:27.591710 systemd-fsck[1581]: /dev/nvme0n1p1: 790 files, 120773/258078 clusters Nov 1 00:39:27.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.594828 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:39:27.596948 systemd[1]: Mounting boot.mount... Nov 1 00:39:27.620807 systemd[1]: Mounted boot.mount. Nov 1 00:39:27.650903 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:39:27.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.697178 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:39:27.743089 kernel: loop1: detected capacity change from 0 to 224512 Nov 1 00:39:27.785933 (sd-sysext)[1596]: Using extensions 'kubernetes'. Nov 1 00:39:27.786569 (sd-sysext)[1596]: Merged extensions into '/usr'. Nov 1 00:39:27.803695 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:39:27.804517 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:39:27.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.811624 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:39:27.813564 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:39:27.814790 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:39:27.817378 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:39:27.820711 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:39:27.824802 systemd[1]: Starting modprobe@loop.service... Nov 1 00:39:27.826217 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:39:27.826449 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:39:27.826624 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:39:27.828738 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:39:27.829044 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:39:27.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.833331 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:39:27.834293 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:39:27.834476 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:39:27.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.835550 systemd[1]: Finished systemd-sysext.service. Nov 1 00:39:27.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.836306 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:39:27.836453 systemd[1]: Finished modprobe@loop.service. Nov 1 00:39:27.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:27.839451 systemd[1]: Starting ensure-sysext.service... Nov 1 00:39:27.840424 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:39:27.840523 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:39:27.842020 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:39:27.853921 systemd[1]: Reloading. Nov 1 00:39:27.863896 systemd-tmpfiles[1603]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:39:27.867831 systemd-tmpfiles[1603]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:39:27.871442 systemd-tmpfiles[1603]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:39:27.967666 /usr/lib/systemd/system-generators/torcx-generator[1623]: time="2025-11-01T00:39:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:39:27.969411 /usr/lib/systemd/system-generators/torcx-generator[1623]: time="2025-11-01T00:39:27Z" level=info msg="torcx already run" Nov 1 00:39:28.136356 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:39:28.136385 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:39:28.161328 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:39:28.238000 audit: BPF prog-id=30 op=LOAD Nov 1 00:39:28.238000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:39:28.238000 audit: BPF prog-id=31 op=LOAD Nov 1 00:39:28.238000 audit: BPF prog-id=32 op=LOAD Nov 1 00:39:28.238000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:39:28.238000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:39:28.239000 audit: BPF prog-id=33 op=LOAD Nov 1 00:39:28.239000 audit: BPF prog-id=34 op=LOAD Nov 1 00:39:28.239000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:39:28.239000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:39:28.241000 audit: BPF prog-id=35 op=LOAD Nov 1 00:39:28.241000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:39:28.243000 audit: BPF prog-id=36 op=LOAD Nov 1 00:39:28.243000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:39:28.244000 audit: BPF prog-id=37 op=LOAD Nov 1 00:39:28.244000 audit: BPF prog-id=38 op=LOAD Nov 1 00:39:28.244000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:39:28.244000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:39:28.248388 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:39:28.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.256684 systemd[1]: Starting audit-rules.service... Nov 1 00:39:28.259620 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:39:28.262280 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:39:28.265000 audit: BPF prog-id=39 op=LOAD Nov 1 00:39:28.266458 systemd[1]: Starting systemd-resolved.service... Nov 1 00:39:28.270000 audit: BPF prog-id=40 op=LOAD Nov 1 00:39:28.271582 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:39:28.275885 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:39:28.287480 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.291202 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:39:28.293856 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:39:28.298353 systemd[1]: Starting modprobe@loop.service... Nov 1 00:39:28.299150 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.299370 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:39:28.303018 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:39:28.303236 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:39:28.304566 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:39:28.304748 systemd[1]: Finished modprobe@loop.service. Nov 1 00:39:28.306032 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:39:28.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.307453 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:39:28.307584 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:39:28.311840 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.313892 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:39:28.316855 systemd[1]: Starting modprobe@loop.service... Nov 1 00:39:28.318119 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.318348 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:39:28.318534 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:39:28.325142 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.327154 systemd[1]: Starting modprobe@drm.service... Nov 1 00:39:28.328981 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.329211 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:39:28.329423 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:39:28.338933 systemd[1]: Finished ensure-sysext.service. Nov 1 00:39:28.339995 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:39:28.340191 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:39:28.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.343000 audit[1684]: SYSTEM_BOOT pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.345931 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:39:28.346115 systemd[1]: Finished modprobe@loop.service. Nov 1 00:39:28.346946 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.348445 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:39:28.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.359648 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:39:28.359834 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:39:28.360659 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:39:28.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.365630 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:39:28.365805 systemd[1]: Finished modprobe@drm.service. Nov 1 00:39:28.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.412778 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:39:28.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:28.446771 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:39:28.447477 systemd[1]: Reached target time-set.target. Nov 1 00:39:28.459000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:39:28.459000 audit[1706]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff04c27620 a2=420 a3=0 items=0 ppid=1679 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:28.459000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:39:28.460193 augenrules[1706]: No rules Nov 1 00:39:28.461805 systemd[1]: Finished audit-rules.service. Nov 1 00:39:28.467361 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:39:28.467388 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:39:28.467554 systemd-resolved[1682]: Positive Trust Anchors: Nov 1 00:39:28.467564 systemd-resolved[1682]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:39:28.467606 systemd-resolved[1682]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:39:28.505376 systemd-resolved[1682]: Defaulting to hostname 'linux'. Nov 1 00:39:28.507522 systemd[1]: Started systemd-resolved.service. Nov 1 00:39:28.508034 systemd[1]: Reached target network.target. Nov 1 00:39:28.508443 systemd[1]: Reached target nss-lookup.target. Nov 1 00:39:28.517947 ldconfig[1570]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:39:28.524348 systemd[1]: Finished ldconfig.service. Nov 1 00:39:28.526288 systemd[1]: Starting systemd-update-done.service... Nov 1 00:39:28.533927 systemd[1]: Finished systemd-update-done.service. Nov 1 00:39:28.534415 systemd[1]: Reached target sysinit.target. Nov 1 00:39:28.534846 systemd[1]: Started motdgen.path. Nov 1 00:39:28.535218 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:39:28.535729 systemd[1]: Started logrotate.timer. Nov 1 00:39:28.536148 systemd[1]: Started mdadm.timer. Nov 1 00:39:28.536461 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:39:28.536786 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:39:28.536818 systemd[1]: Reached target paths.target. Nov 1 00:39:28.537263 systemd[1]: Reached target timers.target. Nov 1 00:39:28.537875 systemd[1]: Listening on dbus.socket. Nov 1 00:39:28.539252 systemd[1]: Starting docker.socket... Nov 1 00:39:28.543453 systemd[1]: Listening on sshd.socket. Nov 1 00:39:28.544036 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:39:28.544636 systemd[1]: Listening on docker.socket. Nov 1 00:39:28.545333 systemd[1]: Reached target sockets.target. Nov 1 00:39:28.545721 systemd[1]: Reached target basic.target. Nov 1 00:39:28.546161 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.546198 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:39:28.547446 systemd[1]: Starting containerd.service... Nov 1 00:39:28.549476 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Nov 1 00:39:28.552107 systemd[1]: Starting dbus.service... Nov 1 00:39:28.554913 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:39:28.558932 systemd[1]: Starting extend-filesystems.service... Nov 1 00:39:28.559618 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:39:28.561256 systemd[1]: Starting motdgen.service... Nov 1 00:39:28.564166 systemd[1]: Starting prepare-helm.service... Nov 1 00:39:28.568344 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:39:28.570506 systemd[1]: Starting sshd-keygen.service... Nov 1 00:39:28.576686 systemd[1]: Starting systemd-logind.service... Nov 1 00:39:28.577600 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:39:28.577703 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:39:28.615388 jq[1726]: true Nov 1 00:39:28.579433 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:39:28.619404 jq[1717]: false Nov 1 00:39:28.580552 systemd[1]: Starting update-engine.service... Nov 1 00:39:28.583693 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:39:28.596945 systemd-timesyncd[1683]: Contacted time server 172.233.189.68:123 (0.flatcar.pool.ntp.org). Nov 1 00:39:28.597042 systemd-timesyncd[1683]: Initial clock synchronization to Sat 2025-11-01 00:39:28.698568 UTC. Nov 1 00:39:28.598240 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:39:28.598487 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:39:28.618392 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:39:28.618662 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:39:28.637301 jq[1736]: true Nov 1 00:39:28.646184 tar[1729]: linux-amd64/LICENSE Nov 1 00:39:28.646184 tar[1729]: linux-amd64/helm Nov 1 00:39:28.673328 dbus-daemon[1716]: [system] SELinux support is enabled Nov 1 00:39:28.674240 systemd[1]: Started dbus.service. Nov 1 00:39:28.677977 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:39:28.678012 systemd[1]: Reached target system-config.target. Nov 1 00:39:28.678771 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:39:28.678798 systemd[1]: Reached target user-config.target. Nov 1 00:39:28.680392 dbus-daemon[1716]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1462 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Nov 1 00:39:28.687577 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.systemd1' Nov 1 00:39:28.692988 systemd[1]: Starting systemd-hostnamed.service... Nov 1 00:39:28.694338 extend-filesystems[1718]: Found loop1 Nov 1 00:39:28.694338 extend-filesystems[1718]: Found nvme0n1 Nov 1 00:39:28.694338 extend-filesystems[1718]: Found nvme0n1p1 Nov 1 00:39:28.694338 extend-filesystems[1718]: Found nvme0n1p2 Nov 1 00:39:28.694338 extend-filesystems[1718]: Found nvme0n1p3 Nov 1 00:39:28.694338 extend-filesystems[1718]: Found usr Nov 1 00:39:28.694338 extend-filesystems[1718]: Found nvme0n1p4 Nov 1 00:39:28.694338 extend-filesystems[1718]: Found nvme0n1p6 Nov 1 00:39:28.694338 extend-filesystems[1718]: Found nvme0n1p7 Nov 1 00:39:28.694338 extend-filesystems[1718]: Found nvme0n1p9 Nov 1 00:39:28.694338 extend-filesystems[1718]: Checking size of /dev/nvme0n1p9 Nov 1 00:39:28.723619 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:39:28.723850 systemd[1]: Finished motdgen.service. Nov 1 00:39:28.757716 extend-filesystems[1718]: Resized partition /dev/nvme0n1p9 Nov 1 00:39:28.779797 extend-filesystems[1770]: resize2fs 1.46.5 (30-Dec-2021) Nov 1 00:39:28.789538 bash[1766]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:39:28.790698 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:39:28.793089 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 3587067 blocks Nov 1 00:39:28.814127 env[1734]: time="2025-11-01T00:39:28.814065493Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:39:28.840258 update_engine[1725]: I1101 00:39:28.839360 1725 main.cc:92] Flatcar Update Engine starting Nov 1 00:39:28.844356 systemd[1]: Started update-engine.service. Nov 1 00:39:28.849105 systemd[1]: Started locksmithd.service. Nov 1 00:39:28.855555 update_engine[1725]: I1101 00:39:28.855516 1725 update_check_scheduler.cc:74] Next update check in 7m31s Nov 1 00:39:28.878976 systemd-logind[1723]: Watching system buttons on /dev/input/event1 (Power Button) Nov 1 00:39:28.881993 systemd-logind[1723]: Watching system buttons on /dev/input/event2 (Sleep Button) Nov 1 00:39:28.882234 systemd-logind[1723]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 1 00:39:28.886152 systemd-logind[1723]: New seat seat0. Nov 1 00:39:28.888660 systemd[1]: Started systemd-logind.service. Nov 1 00:39:28.903546 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 3587067 Nov 1 00:39:28.916129 extend-filesystems[1770]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Nov 1 00:39:28.916129 extend-filesystems[1770]: old_desc_blocks = 1, new_desc_blocks = 2 Nov 1 00:39:28.916129 extend-filesystems[1770]: The filesystem on /dev/nvme0n1p9 is now 3587067 (4k) blocks long. Nov 1 00:39:28.919732 extend-filesystems[1718]: Resized filesystem in /dev/nvme0n1p9 Nov 1 00:39:28.917158 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:39:28.917394 systemd[1]: Finished extend-filesystems.service. Nov 1 00:39:28.940679 env[1734]: time="2025-11-01T00:39:28.940597960Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:39:28.941001 env[1734]: time="2025-11-01T00:39:28.940975627Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:39:28.943127 env[1734]: time="2025-11-01T00:39:28.942935280Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:39:28.943273 env[1734]: time="2025-11-01T00:39:28.943255411Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:39:28.943643 env[1734]: time="2025-11-01T00:39:28.943619452Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:39:28.944464 env[1734]: time="2025-11-01T00:39:28.944434198Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:39:28.944578 env[1734]: time="2025-11-01T00:39:28.944560461Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:39:28.944653 env[1734]: time="2025-11-01T00:39:28.944637858Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:39:28.944839 env[1734]: time="2025-11-01T00:39:28.944822981Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:39:28.945256 env[1734]: time="2025-11-01T00:39:28.945230688Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:39:28.948182 env[1734]: time="2025-11-01T00:39:28.948144178Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:39:28.948293 env[1734]: time="2025-11-01T00:39:28.948277526Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:39:28.948439 env[1734]: time="2025-11-01T00:39:28.948421988Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:39:28.948526 env[1734]: time="2025-11-01T00:39:28.948511295Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953314146Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953361005Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953378365Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953416058Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953434762Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953455056Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953475645Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953496834Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953517389Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953537393Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953558172Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953578069Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953714228Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:39:28.954082 env[1734]: time="2025-11-01T00:39:28.953799078Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:39:28.954859 env[1734]: time="2025-11-01T00:39:28.954836015Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:39:28.954953 env[1734]: time="2025-11-01T00:39:28.954938601Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955029 env[1734]: time="2025-11-01T00:39:28.955014762Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:39:28.955159 env[1734]: time="2025-11-01T00:39:28.955143617Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955232 env[1734]: time="2025-11-01T00:39:28.955218515Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955300 env[1734]: time="2025-11-01T00:39:28.955287571Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955367 env[1734]: time="2025-11-01T00:39:28.955354585Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955435 env[1734]: time="2025-11-01T00:39:28.955422778Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955512 env[1734]: time="2025-11-01T00:39:28.955499006Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955586 env[1734]: time="2025-11-01T00:39:28.955572867Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955655 env[1734]: time="2025-11-01T00:39:28.955642258Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.955734 env[1734]: time="2025-11-01T00:39:28.955721031Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:39:28.955965 env[1734]: time="2025-11-01T00:39:28.955947623Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.956064 env[1734]: time="2025-11-01T00:39:28.956036472Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.956157 env[1734]: time="2025-11-01T00:39:28.956142446Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.956221 env[1734]: time="2025-11-01T00:39:28.956209870Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:39:28.956300 env[1734]: time="2025-11-01T00:39:28.956280875Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:39:28.956369 env[1734]: time="2025-11-01T00:39:28.956355809Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:39:28.956439 env[1734]: time="2025-11-01T00:39:28.956426504Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:39:28.956544 env[1734]: time="2025-11-01T00:39:28.956528008Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:39:28.956931 env[1734]: time="2025-11-01T00:39:28.956858721Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:39:28.960158 env[1734]: time="2025-11-01T00:39:28.957123655Z" level=info msg="Connect containerd service" Nov 1 00:39:28.960158 env[1734]: time="2025-11-01T00:39:28.957180807Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:39:28.966894 env[1734]: time="2025-11-01T00:39:28.966850149Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:39:28.967438 env[1734]: time="2025-11-01T00:39:28.967409577Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:39:28.968261 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.hostname1' Nov 1 00:39:28.968455 systemd[1]: Started systemd-hostnamed.service. Nov 1 00:39:28.970521 dbus-daemon[1716]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1751 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Nov 1 00:39:28.970961 env[1734]: time="2025-11-01T00:39:28.970932976Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:39:28.974365 systemd[1]: Starting polkit.service... Nov 1 00:39:28.979296 env[1734]: time="2025-11-01T00:39:28.968813774Z" level=info msg="Start subscribing containerd event" Nov 1 00:39:28.979296 env[1734]: time="2025-11-01T00:39:28.979203318Z" level=info msg="Start recovering state" Nov 1 00:39:28.979438 env[1734]: time="2025-11-01T00:39:28.979303606Z" level=info msg="Start event monitor" Nov 1 00:39:28.979438 env[1734]: time="2025-11-01T00:39:28.979336897Z" level=info msg="Start snapshots syncer" Nov 1 00:39:28.979438 env[1734]: time="2025-11-01T00:39:28.979356923Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:39:28.979438 env[1734]: time="2025-11-01T00:39:28.979373967Z" level=info msg="Start streaming server" Nov 1 00:39:28.980862 env[1734]: time="2025-11-01T00:39:28.979544246Z" level=info msg="containerd successfully booted in 0.194201s" Nov 1 00:39:28.979603 systemd[1]: Started containerd.service. Nov 1 00:39:28.996259 systemd-networkd[1462]: eth0: Gained IPv6LL Nov 1 00:39:28.998595 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:39:28.999858 systemd[1]: Reached target network-online.target. Nov 1 00:39:29.002622 systemd[1]: Started amazon-ssm-agent.service. Nov 1 00:39:29.007047 systemd[1]: Starting kubelet.service... Nov 1 00:39:29.010934 systemd[1]: Started nvidia.service. Nov 1 00:39:29.022388 polkitd[1792]: Started polkitd version 121 Nov 1 00:39:29.108650 polkitd[1792]: Loading rules from directory /etc/polkit-1/rules.d Nov 1 00:39:29.111158 polkitd[1792]: Loading rules from directory /usr/share/polkit-1/rules.d Nov 1 00:39:29.129036 polkitd[1792]: Finished loading, compiling and executing 2 rules Nov 1 00:39:29.132397 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Nov 1 00:39:29.132621 systemd[1]: Started polkit.service. Nov 1 00:39:29.145523 polkitd[1792]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Nov 1 00:39:29.219398 amazon-ssm-agent[1797]: 2025/11/01 00:39:29 Failed to load instance info from vault. RegistrationKey does not exist. Nov 1 00:39:29.220813 amazon-ssm-agent[1797]: Initializing new seelog logger Nov 1 00:39:29.221637 amazon-ssm-agent[1797]: New Seelog Logger Creation Complete Nov 1 00:39:29.221637 amazon-ssm-agent[1797]: 2025/11/01 00:39:29 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Nov 1 00:39:29.221637 amazon-ssm-agent[1797]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Nov 1 00:39:29.221637 amazon-ssm-agent[1797]: 2025/11/01 00:39:29 processing appconfig overrides Nov 1 00:39:29.244857 systemd-hostnamed[1751]: Hostname set to (transient) Nov 1 00:39:29.255740 systemd-resolved[1682]: System hostname changed to 'ip-172-31-20-5'. Nov 1 00:39:29.453545 systemd[1]: nvidia.service: Deactivated successfully. Nov 1 00:39:29.569348 coreos-metadata[1715]: Nov 01 00:39:29.569 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Nov 1 00:39:29.582737 coreos-metadata[1715]: Nov 01 00:39:29.582 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Nov 1 00:39:29.583340 coreos-metadata[1715]: Nov 01 00:39:29.583 INFO Fetch successful Nov 1 00:39:29.583460 coreos-metadata[1715]: Nov 01 00:39:29.583 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Nov 1 00:39:29.583890 coreos-metadata[1715]: Nov 01 00:39:29.583 INFO Fetch successful Nov 1 00:39:29.585975 unknown[1715]: wrote ssh authorized keys file for user: core Nov 1 00:39:29.617146 update-ssh-keys[1897]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:39:29.617822 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Nov 1 00:39:29.763915 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Create new startup processor Nov 1 00:39:29.765362 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [LongRunningPluginsManager] registered plugins: {} Nov 1 00:39:29.765526 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Initializing bookkeeping folders Nov 1 00:39:29.765606 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO removing the completed state files Nov 1 00:39:29.765687 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Initializing bookkeeping folders for long running plugins Nov 1 00:39:29.765773 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Nov 1 00:39:29.765838 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Initializing healthcheck folders for long running plugins Nov 1 00:39:29.765903 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Initializing locations for inventory plugin Nov 1 00:39:29.765984 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Initializing default location for custom inventory Nov 1 00:39:29.766125 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Initializing default location for file inventory Nov 1 00:39:29.766196 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Initializing default location for role inventory Nov 1 00:39:29.766257 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Init the cloudwatchlogs publisher Nov 1 00:39:29.766317 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:configureDocker Nov 1 00:39:29.766390 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:refreshAssociation Nov 1 00:39:29.766466 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:runDocument Nov 1 00:39:29.766528 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:updateSsmAgent Nov 1 00:39:29.766583 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:runPowerShellScript Nov 1 00:39:29.766640 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:runDockerAction Nov 1 00:39:29.766706 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:configurePackage Nov 1 00:39:29.766764 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:downloadContent Nov 1 00:39:29.766835 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform independent plugin aws:softwareInventory Nov 1 00:39:29.766903 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Successfully loaded platform dependent plugin aws:runShellScript Nov 1 00:39:29.766965 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Nov 1 00:39:29.767026 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO OS: linux, Arch: amd64 Nov 1 00:39:29.770341 amazon-ssm-agent[1797]: datastore file /var/lib/amazon/ssm/i-00be512512ee6dbd9/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Nov 1 00:39:29.864702 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] Starting session document processing engine... Nov 1 00:39:29.959405 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] [EngineProcessor] Starting Nov 1 00:39:30.053797 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Nov 1 00:39:30.148244 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-00be512512ee6dbd9, requestId: 2d376268-9be5-4bcc-9de9-391d6ed984d9 Nov 1 00:39:30.152927 tar[1729]: linux-amd64/README.md Nov 1 00:39:30.160649 systemd[1]: Finished prepare-helm.service. Nov 1 00:39:30.242950 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] Starting document processing engine... Nov 1 00:39:30.266979 locksmithd[1778]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:39:30.337860 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] [EngineProcessor] Starting Nov 1 00:39:30.432931 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Nov 1 00:39:30.528605 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] Starting message polling Nov 1 00:39:30.539438 sshd_keygen[1737]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:39:30.567256 systemd[1]: Finished sshd-keygen.service. Nov 1 00:39:30.570149 systemd[1]: Starting issuegen.service... Nov 1 00:39:30.577981 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:39:30.578254 systemd[1]: Finished issuegen.service. Nov 1 00:39:30.581148 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:39:30.590221 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:39:30.592654 systemd[1]: Started getty@tty1.service. Nov 1 00:39:30.595091 systemd[1]: Started serial-getty@ttyS0.service. Nov 1 00:39:30.596691 systemd[1]: Reached target getty.target. Nov 1 00:39:30.624231 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] Starting send replies to MDS Nov 1 00:39:30.720415 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [instanceID=i-00be512512ee6dbd9] Starting association polling Nov 1 00:39:30.816917 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Nov 1 00:39:30.913117 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] [Association] Launching response handler Nov 1 00:39:31.009345 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Nov 1 00:39:31.106121 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Nov 1 00:39:31.203015 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Nov 1 00:39:31.300134 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] listening reply. Nov 1 00:39:31.397288 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [HealthCheck] HealthCheck reporting agent health. Nov 1 00:39:31.494600 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [OfflineService] Starting document processing engine... Nov 1 00:39:31.592001 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [OfflineService] [EngineProcessor] Starting Nov 1 00:39:31.689832 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [OfflineService] [EngineProcessor] Initial processing Nov 1 00:39:31.768642 systemd[1]: Started kubelet.service. Nov 1 00:39:31.770287 systemd[1]: Reached target multi-user.target. Nov 1 00:39:31.772666 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:39:31.785656 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:39:31.785932 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:39:31.786684 systemd[1]: Startup finished in 634ms (kernel) + 6.764s (initrd) + 10.245s (userspace) = 17.644s. Nov 1 00:39:31.788994 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [OfflineService] Starting message polling Nov 1 00:39:31.886091 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [OfflineService] Starting send replies to MDS Nov 1 00:39:31.984284 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [LongRunningPluginsManager] starting long running plugin manager Nov 1 00:39:32.082979 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Nov 1 00:39:32.181671 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Nov 1 00:39:32.280548 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [StartupProcessor] Executing startup processor tasks Nov 1 00:39:32.379711 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Nov 1 00:39:32.479133 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Nov 1 00:39:32.578515 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Nov 1 00:39:32.678296 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-00be512512ee6dbd9?role=subscribe&stream=input Nov 1 00:39:32.778175 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-00be512512ee6dbd9?role=subscribe&stream=input Nov 1 00:39:32.878264 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] Starting receiving message from control channel Nov 1 00:39:32.933481 kubelet[1925]: E1101 00:39:32.933357 1925 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:39:32.935559 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:39:32.935743 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:39:32.936052 systemd[1]: kubelet.service: Consumed 1.201s CPU time. Nov 1 00:39:32.978765 amazon-ssm-agent[1797]: 2025-11-01 00:39:29 INFO [MessageGatewayService] [EngineProcessor] Initial processing Nov 1 00:39:38.543819 systemd[1]: Created slice system-sshd.slice. Nov 1 00:39:38.545452 systemd[1]: Started sshd@0-172.31.20.5:22-147.75.109.163:46620.service. Nov 1 00:39:38.724822 sshd[1934]: Accepted publickey for core from 147.75.109.163 port 46620 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:39:38.727812 sshd[1934]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:39:38.743702 systemd[1]: Created slice user-500.slice. Nov 1 00:39:38.745620 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:39:38.748616 systemd-logind[1723]: New session 1 of user core. Nov 1 00:39:38.757748 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:39:38.760540 systemd[1]: Starting user@500.service... Nov 1 00:39:38.765179 (systemd)[1937]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:39:38.876876 systemd[1937]: Queued start job for default target default.target. Nov 1 00:39:38.877480 systemd[1937]: Reached target paths.target. Nov 1 00:39:38.877512 systemd[1937]: Reached target sockets.target. Nov 1 00:39:38.877525 systemd[1937]: Reached target timers.target. Nov 1 00:39:38.877537 systemd[1937]: Reached target basic.target. Nov 1 00:39:38.877645 systemd[1]: Started user@500.service. Nov 1 00:39:38.878574 systemd[1]: Started session-1.scope. Nov 1 00:39:38.879211 systemd[1937]: Reached target default.target. Nov 1 00:39:38.879486 systemd[1937]: Startup finished in 104ms. Nov 1 00:39:39.023648 systemd[1]: Started sshd@1-172.31.20.5:22-147.75.109.163:46622.service. Nov 1 00:39:39.187213 sshd[1946]: Accepted publickey for core from 147.75.109.163 port 46622 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:39:39.188931 sshd[1946]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:39:39.194140 systemd-logind[1723]: New session 2 of user core. Nov 1 00:39:39.194697 systemd[1]: Started session-2.scope. Nov 1 00:39:39.321905 sshd[1946]: pam_unix(sshd:session): session closed for user core Nov 1 00:39:39.325679 systemd[1]: sshd@1-172.31.20.5:22-147.75.109.163:46622.service: Deactivated successfully. Nov 1 00:39:39.326615 systemd[1]: session-2.scope: Deactivated successfully. Nov 1 00:39:39.327359 systemd-logind[1723]: Session 2 logged out. Waiting for processes to exit. Nov 1 00:39:39.328315 systemd-logind[1723]: Removed session 2. Nov 1 00:39:39.346827 systemd[1]: Started sshd@2-172.31.20.5:22-147.75.109.163:46630.service. Nov 1 00:39:39.503618 sshd[1952]: Accepted publickey for core from 147.75.109.163 port 46630 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:39:39.505420 sshd[1952]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:39:39.510497 systemd-logind[1723]: New session 3 of user core. Nov 1 00:39:39.510998 systemd[1]: Started session-3.scope. Nov 1 00:39:39.631844 sshd[1952]: pam_unix(sshd:session): session closed for user core Nov 1 00:39:39.634961 systemd[1]: sshd@2-172.31.20.5:22-147.75.109.163:46630.service: Deactivated successfully. Nov 1 00:39:39.635845 systemd[1]: session-3.scope: Deactivated successfully. Nov 1 00:39:39.636547 systemd-logind[1723]: Session 3 logged out. Waiting for processes to exit. Nov 1 00:39:39.637443 systemd-logind[1723]: Removed session 3. Nov 1 00:39:39.656297 systemd[1]: Started sshd@3-172.31.20.5:22-147.75.109.163:46646.service. Nov 1 00:39:39.815734 sshd[1958]: Accepted publickey for core from 147.75.109.163 port 46646 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:39:39.816777 sshd[1958]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:39:39.821760 systemd-logind[1723]: New session 4 of user core. Nov 1 00:39:39.822374 systemd[1]: Started session-4.scope. Nov 1 00:39:39.950781 sshd[1958]: pam_unix(sshd:session): session closed for user core Nov 1 00:39:39.953470 systemd[1]: sshd@3-172.31.20.5:22-147.75.109.163:46646.service: Deactivated successfully. Nov 1 00:39:39.954438 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:39:39.955131 systemd-logind[1723]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:39:39.956166 systemd-logind[1723]: Removed session 4. Nov 1 00:39:39.977606 systemd[1]: Started sshd@4-172.31.20.5:22-147.75.109.163:46654.service. Nov 1 00:39:40.132930 sshd[1964]: Accepted publickey for core from 147.75.109.163 port 46654 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:39:40.134656 sshd[1964]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:39:40.139724 systemd-logind[1723]: New session 5 of user core. Nov 1 00:39:40.140550 systemd[1]: Started session-5.scope. Nov 1 00:39:40.258036 sudo[1967]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:39:40.258388 sudo[1967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:39:40.267308 dbus-daemon[1716]: \xd0}\xcdL\xc3U: received setenforce notice (enforcing=-522565344) Nov 1 00:39:40.269301 sudo[1967]: pam_unix(sudo:session): session closed for user root Nov 1 00:39:40.293124 sshd[1964]: pam_unix(sshd:session): session closed for user core Nov 1 00:39:40.297258 systemd[1]: sshd@4-172.31.20.5:22-147.75.109.163:46654.service: Deactivated successfully. Nov 1 00:39:40.298251 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:39:40.299009 systemd-logind[1723]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:39:40.299996 systemd-logind[1723]: Removed session 5. Nov 1 00:39:40.318826 systemd[1]: Started sshd@5-172.31.20.5:22-147.75.109.163:38978.service. Nov 1 00:39:40.480657 sshd[1971]: Accepted publickey for core from 147.75.109.163 port 38978 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:39:40.482672 sshd[1971]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:39:40.487882 systemd-logind[1723]: New session 6 of user core. Nov 1 00:39:40.488494 systemd[1]: Started session-6.scope. Nov 1 00:39:40.593800 sudo[1975]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:39:40.594046 sudo[1975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:39:40.597675 sudo[1975]: pam_unix(sudo:session): session closed for user root Nov 1 00:39:40.603224 sudo[1974]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:39:40.603549 sudo[1974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:39:40.614521 systemd[1]: Stopping audit-rules.service... Nov 1 00:39:40.615000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:39:40.619316 kernel: kauditd_printk_skb: 233 callbacks suppressed Nov 1 00:39:40.619395 kernel: audit: type=1305 audit(1761957580.615:213): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:39:40.619426 kernel: audit: type=1300 audit(1761957580.615:213): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffefe507200 a2=420 a3=0 items=0 ppid=1 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:40.615000 audit[1978]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffefe507200 a2=420 a3=0 items=0 ppid=1 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:40.619802 auditctl[1978]: No rules Nov 1 00:39:40.620409 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:39:40.620621 systemd[1]: Stopped audit-rules.service. Nov 1 00:39:40.615000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:39:40.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.632720 kernel: audit: type=1327 audit(1761957580.615:213): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:39:40.632801 kernel: audit: type=1131 audit(1761957580.619:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.632345 systemd[1]: Starting audit-rules.service... Nov 1 00:39:40.649161 augenrules[1995]: No rules Nov 1 00:39:40.650216 systemd[1]: Finished audit-rules.service. Nov 1 00:39:40.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.655532 kernel: audit: type=1130 audit(1761957580.649:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.655218 sudo[1974]: pam_unix(sudo:session): session closed for user root Nov 1 00:39:40.654000 audit[1974]: USER_END pid=1974 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.654000 audit[1974]: CRED_DISP pid=1974 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.663260 kernel: audit: type=1106 audit(1761957580.654:216): pid=1974 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.663324 kernel: audit: type=1104 audit(1761957580.654:217): pid=1974 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.678472 sshd[1971]: pam_unix(sshd:session): session closed for user core Nov 1 00:39:40.678000 audit[1971]: USER_END pid=1971 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:39:40.681322 systemd[1]: sshd@5-172.31.20.5:22-147.75.109.163:38978.service: Deactivated successfully. Nov 1 00:39:40.682208 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:39:40.683677 systemd-logind[1723]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:39:40.678000 audit[1971]: CRED_DISP pid=1971 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:39:40.684651 systemd-logind[1723]: Removed session 6. Nov 1 00:39:40.688469 kernel: audit: type=1106 audit(1761957580.678:218): pid=1971 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:39:40.688563 kernel: audit: type=1104 audit(1761957580.678:219): pid=1971 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:39:40.688617 kernel: audit: type=1131 audit(1761957580.680:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.20.5:22-147.75.109.163:38978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.20.5:22-147.75.109.163:38978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.702818 systemd[1]: Started sshd@6-172.31.20.5:22-147.75.109.163:38994.service. Nov 1 00:39:40.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.5:22-147.75.109.163:38994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.855000 audit[2001]: USER_ACCT pid=2001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:39:40.856000 audit[2001]: CRED_ACQ pid=2001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:39:40.856000 audit[2001]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3a96b3f0 a2=3 a3=0 items=0 ppid=1 pid=2001 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:40.856000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:39:40.857855 sshd[2001]: Accepted publickey for core from 147.75.109.163 port 38994 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:39:40.858146 sshd[2001]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:39:40.863613 systemd[1]: Started session-7.scope. Nov 1 00:39:40.863947 systemd-logind[1723]: New session 7 of user core. Nov 1 00:39:40.869000 audit[2001]: USER_START pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:39:40.871000 audit[2003]: CRED_ACQ pid=2003 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:39:40.965000 audit[2004]: USER_ACCT pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.966495 sudo[2004]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:39:40.965000 audit[2004]: CRED_REFR pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.966851 sudo[2004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:39:40.967000 audit[2004]: USER_START pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:39:40.994467 systemd[1]: Starting docker.service... Nov 1 00:39:41.036168 env[2014]: time="2025-11-01T00:39:41.036123135Z" level=info msg="Starting up" Nov 1 00:39:41.037886 env[2014]: time="2025-11-01T00:39:41.037860977Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:39:41.038020 env[2014]: time="2025-11-01T00:39:41.038006999Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:39:41.038128 env[2014]: time="2025-11-01T00:39:41.038101726Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:39:41.038128 env[2014]: time="2025-11-01T00:39:41.038124246Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:39:41.039975 env[2014]: time="2025-11-01T00:39:41.039941075Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:39:41.039975 env[2014]: time="2025-11-01T00:39:41.039962923Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:39:41.040422 env[2014]: time="2025-11-01T00:39:41.039985090Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:39:41.040422 env[2014]: time="2025-11-01T00:39:41.039998090Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:39:41.047824 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport336729898-merged.mount: Deactivated successfully. Nov 1 00:39:41.103217 env[2014]: time="2025-11-01T00:39:41.103172111Z" level=info msg="Loading containers: start." Nov 1 00:39:41.176000 audit[2044]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.176000 audit[2044]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff3e8cfdc0 a2=0 a3=7fff3e8cfdac items=0 ppid=2014 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.176000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:39:41.179000 audit[2046]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.179000 audit[2046]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc564aabd0 a2=0 a3=7ffc564aabbc items=0 ppid=2014 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.179000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:39:41.181000 audit[2048]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.181000 audit[2048]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff910068b0 a2=0 a3=7fff9100689c items=0 ppid=2014 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.181000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:39:41.183000 audit[2050]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.183000 audit[2050]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd39876190 a2=0 a3=7ffd3987617c items=0 ppid=2014 pid=2050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.183000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:39:41.186000 audit[2052]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.186000 audit[2052]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc0d284a60 a2=0 a3=7ffc0d284a4c items=0 ppid=2014 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.186000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:39:41.208000 audit[2057]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.208000 audit[2057]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffca27a84b0 a2=0 a3=7ffca27a849c items=0 ppid=2014 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.208000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:39:41.217000 audit[2059]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.217000 audit[2059]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffc88c8fa0 a2=0 a3=7fffc88c8f8c items=0 ppid=2014 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.217000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:39:41.219000 audit[2061]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.219000 audit[2061]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffeae531940 a2=0 a3=7ffeae53192c items=0 ppid=2014 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.219000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:39:41.222000 audit[2063]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.222000 audit[2063]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd9462c2a0 a2=0 a3=7ffd9462c28c items=0 ppid=2014 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.222000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:39:41.231000 audit[2067]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.231000 audit[2067]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdc549b0a0 a2=0 a3=7ffdc549b08c items=0 ppid=2014 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.231000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:39:41.236000 audit[2068]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.236000 audit[2068]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc5255aa80 a2=0 a3=7ffc5255aa6c items=0 ppid=2014 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.236000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:39:41.250079 kernel: Initializing XFRM netlink socket Nov 1 00:39:41.289627 env[2014]: time="2025-11-01T00:39:41.289583439Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:39:41.290890 (udev-worker)[2024]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:39:41.317000 audit[2076]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.317000 audit[2076]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc1c193aa0 a2=0 a3=7ffc1c193a8c items=0 ppid=2014 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.317000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:39:41.329000 audit[2079]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.329000 audit[2079]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffd0070340 a2=0 a3=7fffd007032c items=0 ppid=2014 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.329000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:39:41.333000 audit[2082]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.333000 audit[2082]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcbf93a190 a2=0 a3=7ffcbf93a17c items=0 ppid=2014 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.333000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:39:41.336000 audit[2084]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.336000 audit[2084]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc63ecd3e0 a2=0 a3=7ffc63ecd3cc items=0 ppid=2014 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.336000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:39:41.338000 audit[2086]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.338000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd8defa020 a2=0 a3=7ffd8defa00c items=0 ppid=2014 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.338000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:39:41.341000 audit[2088]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.341000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc2a4c02e0 a2=0 a3=7ffc2a4c02cc items=0 ppid=2014 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.341000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:39:41.343000 audit[2090]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.343000 audit[2090]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe56086ac0 a2=0 a3=7ffe56086aac items=0 ppid=2014 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.343000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:39:41.354000 audit[2093]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.354000 audit[2093]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffec6b05d00 a2=0 a3=7ffec6b05cec items=0 ppid=2014 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.354000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:39:41.357000 audit[2095]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.357000 audit[2095]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd3169df10 a2=0 a3=7ffd3169defc items=0 ppid=2014 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.357000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:39:41.360000 audit[2097]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.360000 audit[2097]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc6e25ed90 a2=0 a3=7ffc6e25ed7c items=0 ppid=2014 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.360000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:39:41.362000 audit[2099]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.362000 audit[2099]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffefc88aaa0 a2=0 a3=7ffefc88aa8c items=0 ppid=2014 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.362000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:39:41.364557 systemd-networkd[1462]: docker0: Link UP Nov 1 00:39:41.377000 audit[2103]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.377000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd54ff9c80 a2=0 a3=7ffd54ff9c6c items=0 ppid=2014 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.377000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:39:41.383000 audit[2104]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:41.383000 audit[2104]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc079ebcb0 a2=0 a3=7ffc079ebc9c items=0 ppid=2014 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:41.383000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:39:41.384882 env[2014]: time="2025-11-01T00:39:41.384832495Z" level=info msg="Loading containers: done." Nov 1 00:39:41.405468 env[2014]: time="2025-11-01T00:39:41.405402686Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:39:41.405702 env[2014]: time="2025-11-01T00:39:41.405591416Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:39:41.405750 env[2014]: time="2025-11-01T00:39:41.405701108Z" level=info msg="Daemon has completed initialization" Nov 1 00:39:41.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:41.424260 systemd[1]: Started docker.service. Nov 1 00:39:41.438270 env[2014]: time="2025-11-01T00:39:41.435440085Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:39:42.724274 env[1734]: time="2025-11-01T00:39:42.724233205Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Nov 1 00:39:43.186671 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:39:43.186871 systemd[1]: Stopped kubelet.service. Nov 1 00:39:43.186927 systemd[1]: kubelet.service: Consumed 1.201s CPU time. Nov 1 00:39:43.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:43.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:43.188605 systemd[1]: Starting kubelet.service... Nov 1 00:39:43.279944 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4144216923.mount: Deactivated successfully. Nov 1 00:39:43.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:43.433649 systemd[1]: Started kubelet.service. Nov 1 00:39:43.537347 kubelet[2141]: E1101 00:39:43.537234 2141 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:39:43.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:39:43.542590 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:39:43.542781 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:39:44.975889 env[1734]: time="2025-11-01T00:39:44.975745409Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:44.978135 env[1734]: time="2025-11-01T00:39:44.978094410Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:abd2b525baf428ffb8b8b7d1e09761dc5cdb7ed0c7896a9427e29e84f8eafc59,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:44.980504 env[1734]: time="2025-11-01T00:39:44.980459868Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:44.982767 env[1734]: time="2025-11-01T00:39:44.982720279Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:44.984258 env[1734]: time="2025-11-01T00:39:44.984213847Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:abd2b525baf428ffb8b8b7d1e09761dc5cdb7ed0c7896a9427e29e84f8eafc59\"" Nov 1 00:39:44.985262 env[1734]: time="2025-11-01T00:39:44.985230879Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Nov 1 00:39:46.519064 amazon-ssm-agent[1797]: 2025-11-01 00:39:46 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Nov 1 00:39:46.790649 env[1734]: time="2025-11-01T00:39:46.790423264Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:46.792771 env[1734]: time="2025-11-01T00:39:46.792734364Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0debe32fbb7223500fcf8c312f2a568a5abd3ed9274d8ec6780cfb30b8861e91,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:46.795036 env[1734]: time="2025-11-01T00:39:46.794997164Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:46.796775 env[1734]: time="2025-11-01T00:39:46.796744383Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:46.797611 env[1734]: time="2025-11-01T00:39:46.797372069Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:0debe32fbb7223500fcf8c312f2a568a5abd3ed9274d8ec6780cfb30b8861e91\"" Nov 1 00:39:46.798118 env[1734]: time="2025-11-01T00:39:46.798097509Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Nov 1 00:39:48.296403 env[1734]: time="2025-11-01T00:39:48.296348532Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:48.299923 env[1734]: time="2025-11-01T00:39:48.299870279Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6934c23b154fcb9bf54ed5913782de746735a49f4daa4732285915050cd44ad5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:48.302140 env[1734]: time="2025-11-01T00:39:48.302090693Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:48.304406 env[1734]: time="2025-11-01T00:39:48.304362453Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:48.305422 env[1734]: time="2025-11-01T00:39:48.305379545Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:6934c23b154fcb9bf54ed5913782de746735a49f4daa4732285915050cd44ad5\"" Nov 1 00:39:48.306072 env[1734]: time="2025-11-01T00:39:48.306021378Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Nov 1 00:39:49.412484 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount40054318.mount: Deactivated successfully. Nov 1 00:39:50.117269 env[1734]: time="2025-11-01T00:39:50.117225717Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:50.119973 env[1734]: time="2025-11-01T00:39:50.119920674Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fa3fdca615a501743d8deb39729a96e731312aac8d96accec061d5265360332f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:50.122068 env[1734]: time="2025-11-01T00:39:50.121996833Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:50.123404 env[1734]: time="2025-11-01T00:39:50.123353889Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:50.123861 env[1734]: time="2025-11-01T00:39:50.123834507Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:fa3fdca615a501743d8deb39729a96e731312aac8d96accec061d5265360332f\"" Nov 1 00:39:50.124495 env[1734]: time="2025-11-01T00:39:50.124422204Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Nov 1 00:39:50.689663 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1657966881.mount: Deactivated successfully. Nov 1 00:39:51.798842 env[1734]: time="2025-11-01T00:39:51.798702234Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:51.801006 env[1734]: time="2025-11-01T00:39:51.800961973Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:51.803086 env[1734]: time="2025-11-01T00:39:51.803015741Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:51.805312 env[1734]: time="2025-11-01T00:39:51.805276651Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:51.805941 env[1734]: time="2025-11-01T00:39:51.805901275Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Nov 1 00:39:51.806773 env[1734]: time="2025-11-01T00:39:51.806750813Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:39:52.237975 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1464687971.mount: Deactivated successfully. Nov 1 00:39:52.242779 env[1734]: time="2025-11-01T00:39:52.242715877Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:52.244572 env[1734]: time="2025-11-01T00:39:52.244531943Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:52.246667 env[1734]: time="2025-11-01T00:39:52.246625120Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:52.248462 env[1734]: time="2025-11-01T00:39:52.248420694Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:52.249046 env[1734]: time="2025-11-01T00:39:52.249010607Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Nov 1 00:39:52.249972 env[1734]: time="2025-11-01T00:39:52.249812928Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Nov 1 00:39:52.730489 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3082282327.mount: Deactivated successfully. Nov 1 00:39:53.806643 kernel: kauditd_printk_skb: 88 callbacks suppressed Nov 1 00:39:53.806801 kernel: audit: type=1130 audit(1761957593.793:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:53.806839 kernel: audit: type=1131 audit(1761957593.793:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:53.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:53.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:53.793956 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:39:53.794249 systemd[1]: Stopped kubelet.service. Nov 1 00:39:53.801916 systemd[1]: Starting kubelet.service... Nov 1 00:39:54.068774 systemd[1]: Started kubelet.service. Nov 1 00:39:54.080072 kernel: audit: type=1130 audit(1761957594.068:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:54.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:54.164288 kubelet[2151]: E1101 00:39:54.164239 2151 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:39:54.166465 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:39:54.166643 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:39:54.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:39:54.171544 kernel: audit: type=1131 audit(1761957594.165:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:39:55.424217 env[1734]: time="2025-11-01T00:39:55.424171571Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:55.426832 env[1734]: time="2025-11-01T00:39:55.426781472Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:55.429296 env[1734]: time="2025-11-01T00:39:55.429253639Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:55.431525 env[1734]: time="2025-11-01T00:39:55.431483165Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:39:55.434189 env[1734]: time="2025-11-01T00:39:55.434132102Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Nov 1 00:39:57.984900 systemd[1]: Stopped kubelet.service. Nov 1 00:39:57.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:57.994307 kernel: audit: type=1130 audit(1761957597.984:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:57.994433 kernel: audit: type=1131 audit(1761957597.987:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:57.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:57.991187 systemd[1]: Starting kubelet.service... Nov 1 00:39:58.079739 systemd[1]: Reloading. Nov 1 00:39:58.213801 /usr/lib/systemd/system-generators/torcx-generator[2200]: time="2025-11-01T00:39:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:39:58.213840 /usr/lib/systemd/system-generators/torcx-generator[2200]: time="2025-11-01T00:39:58Z" level=info msg="torcx already run" Nov 1 00:39:58.359958 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:39:58.360342 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:39:58.385236 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:39:58.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.498918 kernel: audit: type=1400 audit(1761957598.489:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.499041 kernel: audit: type=1400 audit(1761957598.489:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.503066 kernel: audit: type=1400 audit(1761957598.494:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.511129 kernel: audit: type=1400 audit(1761957598.494:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.497000 audit: BPF prog-id=49 op=LOAD Nov 1 00:39:58.497000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:39:58.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit: BPF prog-id=50 op=LOAD Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.501000 audit: BPF prog-id=51 op=LOAD Nov 1 00:39:58.501000 audit: BPF prog-id=45 op=UNLOAD Nov 1 00:39:58.501000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit: BPF prog-id=52 op=LOAD Nov 1 00:39:58.509000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit: BPF prog-id=53 op=LOAD Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.509000 audit: BPF prog-id=54 op=LOAD Nov 1 00:39:58.509000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:39:58.509000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:39:58.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:58.555174 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Nov 1 00:39:58.555270 systemd[1]: kubelet.service: Failed with result 'signal'. Nov 1 00:39:58.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:39:58.555987 systemd[1]: Stopped kubelet.service. Nov 1 00:39:58.559410 systemd[1]: Starting kubelet.service... Nov 1 00:39:59.056671 kernel: kauditd_printk_skb: 475 callbacks suppressed Nov 1 00:39:59.056826 kernel: audit: type=1130 audit(1761957599.047:336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:59.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:59.047842 systemd[1]: Started kubelet.service. Nov 1 00:39:59.119086 kubelet[2261]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:39:59.119086 kubelet[2261]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:39:59.119086 kubelet[2261]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:39:59.119562 kubelet[2261]: I1101 00:39:59.119198 2261 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:39:59.278482 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Nov 1 00:39:59.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:59.289236 kernel: audit: type=1131 audit(1761957599.277:337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:39:59.309000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:39:59.313460 kernel: audit: type=1334 audit(1761957599.309:338): prog-id=51 op=UNLOAD Nov 1 00:39:59.328151 kernel: audit: type=1334 audit(1761957599.309:339): prog-id=50 op=UNLOAD Nov 1 00:39:59.328415 kernel: audit: type=1334 audit(1761957599.309:340): prog-id=49 op=UNLOAD Nov 1 00:39:59.309000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:39:59.309000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:39:59.494331 kubelet[2261]: I1101 00:39:59.494286 2261 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:39:59.494331 kubelet[2261]: I1101 00:39:59.494320 2261 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:39:59.494697 kubelet[2261]: I1101 00:39:59.494674 2261 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:39:59.552855 kubelet[2261]: E1101 00:39:59.552815 2261 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.20.5:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:39:59.554472 kubelet[2261]: I1101 00:39:59.554443 2261 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:39:59.567072 kubelet[2261]: E1101 00:39:59.566954 2261 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:39:59.567072 kubelet[2261]: I1101 00:39:59.566989 2261 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:39:59.569688 kubelet[2261]: I1101 00:39:59.569644 2261 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:39:59.569867 kubelet[2261]: I1101 00:39:59.569837 2261 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:39:59.570034 kubelet[2261]: I1101 00:39:59.569864 2261 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-20-5","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:39:59.570034 kubelet[2261]: I1101 00:39:59.570035 2261 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:39:59.570214 kubelet[2261]: I1101 00:39:59.570044 2261 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:39:59.570214 kubelet[2261]: I1101 00:39:59.570177 2261 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:39:59.575724 kubelet[2261]: I1101 00:39:59.575689 2261 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:39:59.575852 kubelet[2261]: I1101 00:39:59.575742 2261 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:39:59.575852 kubelet[2261]: I1101 00:39:59.575765 2261 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:39:59.575852 kubelet[2261]: I1101 00:39:59.575776 2261 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:39:59.583868 kubelet[2261]: I1101 00:39:59.583774 2261 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:39:59.584474 kubelet[2261]: I1101 00:39:59.584457 2261 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:39:59.587640 kubelet[2261]: W1101 00:39:59.587585 2261 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:39:59.594639 kubelet[2261]: I1101 00:39:59.594594 2261 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:39:59.594793 kubelet[2261]: I1101 00:39:59.594662 2261 server.go:1287] "Started kubelet" Nov 1 00:39:59.594917 kubelet[2261]: W1101 00:39:59.594869 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.20.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-5&limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:39:59.594970 kubelet[2261]: E1101 00:39:59.594935 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.20.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-5&limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:39:59.597000 audit[2261]: AVC avc: denied { mac_admin } for pid=2261 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:59.606967 kubelet[2261]: I1101 00:39:59.598552 2261 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:39:59.606967 kubelet[2261]: I1101 00:39:59.598605 2261 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:39:59.606967 kubelet[2261]: I1101 00:39:59.598703 2261 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:39:59.606967 kubelet[2261]: I1101 00:39:59.605378 2261 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:39:59.606967 kubelet[2261]: I1101 00:39:59.606538 2261 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:39:59.607247 kernel: audit: type=1400 audit(1761957599.597:341): avc: denied { mac_admin } for pid=2261 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:59.597000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:39:59.597000 audit[2261]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008f29c0 a1=c0008fe528 a2=c0008f2990 a3=25 items=0 ppid=1 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.612396 kubelet[2261]: W1101 00:39:59.610129 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.20.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:39:59.612396 kubelet[2261]: E1101 00:39:59.610191 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.20.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:39:59.616969 kubelet[2261]: I1101 00:39:59.616925 2261 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:39:59.621965 kernel: audit: type=1401 audit(1761957599.597:341): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:39:59.622804 kernel: audit: type=1300 audit(1761957599.597:341): arch=c000003e syscall=188 success=no exit=-22 a0=c0008f29c0 a1=c0008fe528 a2=c0008f2990 a3=25 items=0 ppid=1 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.622867 kernel: audit: type=1327 audit(1761957599.597:341): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:39:59.597000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:39:59.637464 kernel: audit: type=1400 audit(1761957599.597:342): avc: denied { mac_admin } for pid=2261 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:59.597000 audit[2261]: AVC avc: denied { mac_admin } for pid=2261 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:59.637652 kubelet[2261]: I1101 00:39:59.630367 2261 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:39:59.637652 kubelet[2261]: E1101 00:39:59.630678 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:39:59.637652 kubelet[2261]: E1101 00:39:59.620247 2261 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.20.5:6443/api/v1/namespaces/default/events\": dial tcp 172.31.20.5:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-20-5.1873bb1a01233b02 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-20-5,UID:ip-172-31-20-5,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-20-5,},FirstTimestamp:2025-11-01 00:39:59.594625794 +0000 UTC m=+0.536928494,LastTimestamp:2025-11-01 00:39:59.594625794 +0000 UTC m=+0.536928494,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-20-5,}" Nov 1 00:39:59.637652 kubelet[2261]: I1101 00:39:59.635165 2261 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:39:59.637652 kubelet[2261]: I1101 00:39:59.635461 2261 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:39:59.637652 kubelet[2261]: E1101 00:39:59.636839 2261 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-5?timeout=10s\": dial tcp 172.31.20.5:6443: connect: connection refused" interval="200ms" Nov 1 00:39:59.637652 kubelet[2261]: I1101 00:39:59.637119 2261 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:39:59.637652 kubelet[2261]: I1101 00:39:59.637246 2261 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:39:59.597000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:39:59.597000 audit[2261]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00063d340 a1=c0008fe540 a2=c0008f2a50 a3=25 items=0 ppid=1 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.597000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:39:59.601000 audit[2274]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:59.601000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc02d311d0 a2=0 a3=7ffc02d311bc items=0 ppid=2261 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.638939 kubelet[2261]: I1101 00:39:59.638818 2261 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:39:59.638939 kubelet[2261]: I1101 00:39:59.638881 2261 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:39:59.601000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:39:59.602000 audit[2275]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:59.602000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb5394a90 a2=0 a3=7ffeb5394a7c items=0 ppid=2261 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.602000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:39:59.639387 kubelet[2261]: W1101 00:39:59.639335 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.20.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:39:59.639444 kubelet[2261]: E1101 00:39:59.639400 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.20.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:39:59.639626 kubelet[2261]: I1101 00:39:59.639605 2261 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:39:59.642000 audit[2277]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:59.642000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd0c016350 a2=0 a3=7ffd0c01633c items=0 ppid=2261 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.642000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:39:59.648000 audit[2279]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2279 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:59.648000 audit[2279]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe5a2bf550 a2=0 a3=7ffe5a2bf53c items=0 ppid=2261 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.648000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:39:59.674511 kubelet[2261]: I1101 00:39:59.674483 2261 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:39:59.674511 kubelet[2261]: I1101 00:39:59.674504 2261 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:39:59.674700 kubelet[2261]: I1101 00:39:59.674539 2261 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:39:59.674000 audit[2285]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:59.674000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc019e50c0 a2=0 a3=7ffc019e50ac items=0 ppid=2261 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.674000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:39:59.676828 kubelet[2261]: I1101 00:39:59.675581 2261 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:39:59.676000 audit[2287]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:39:59.676000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcf1c92680 a2=0 a3=7ffcf1c9266c items=0 ppid=2261 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.676000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:39:59.677000 audit[2288]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:59.677000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6e8af860 a2=0 a3=7ffe6e8af84c items=0 ppid=2261 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.677000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:39:59.678560 kubelet[2261]: I1101 00:39:59.678533 2261 policy_none.go:49] "None policy: Start" Nov 1 00:39:59.678640 kubelet[2261]: I1101 00:39:59.678573 2261 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:39:59.678640 kubelet[2261]: I1101 00:39:59.678589 2261 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:39:59.678729 kubelet[2261]: I1101 00:39:59.678677 2261 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:39:59.678729 kubelet[2261]: I1101 00:39:59.678697 2261 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:39:59.678806 kubelet[2261]: I1101 00:39:59.678729 2261 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:39:59.678806 kubelet[2261]: I1101 00:39:59.678739 2261 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:39:59.678806 kubelet[2261]: E1101 00:39:59.678795 2261 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:39:59.680316 kubelet[2261]: W1101 00:39:59.680263 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.20.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:39:59.680461 kubelet[2261]: E1101 00:39:59.680336 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.20.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:39:59.680000 audit[2291]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:39:59.680000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff22abfa0 a2=0 a3=7ffff22abf8c items=0 ppid=2261 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.680000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:39:59.682000 audit[2293]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:39:59.682000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffce7402170 a2=0 a3=7ffce740215c items=0 ppid=2261 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.682000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:39:59.683000 audit[2294]: NETFILTER_CFG table=filter:35 family=10 entries=2 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:39:59.683000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd1679bf60 a2=0 a3=7ffd1679bf4c items=0 ppid=2261 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.683000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:39:59.687473 systemd[1]: Created slice kubepods.slice. Nov 1 00:39:59.686000 audit[2292]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:59.686000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd7cd68cd0 a2=0 a3=7ffd7cd68cbc items=0 ppid=2261 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.686000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:39:59.689000 audit[2295]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:39:59.689000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc758f59b0 a2=0 a3=7ffc758f599c items=0 ppid=2261 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.689000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:39:59.694250 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:39:59.702722 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:39:59.707180 kubelet[2261]: I1101 00:39:59.707149 2261 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:39:59.706000 audit[2261]: AVC avc: denied { mac_admin } for pid=2261 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:39:59.706000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:39:59.706000 audit[2261]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000058d20 a1=c000938b88 a2=c000058780 a3=25 items=0 ppid=1 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:39:59.706000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:39:59.707568 kubelet[2261]: I1101 00:39:59.707227 2261 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:39:59.707568 kubelet[2261]: I1101 00:39:59.707386 2261 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:39:59.707568 kubelet[2261]: I1101 00:39:59.707400 2261 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:39:59.708181 kubelet[2261]: I1101 00:39:59.708158 2261 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:39:59.708692 kubelet[2261]: E1101 00:39:59.708673 2261 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:39:59.708870 kubelet[2261]: E1101 00:39:59.708860 2261 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-20-5\" not found" Nov 1 00:39:59.793900 systemd[1]: Created slice kubepods-burstable-pod63c1492c74a1264b47c1f18caeaf9495.slice. Nov 1 00:39:59.800986 kubelet[2261]: E1101 00:39:59.800944 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:39:59.804954 systemd[1]: Created slice kubepods-burstable-pod84e214e259c9022f0cefa758b65402ff.slice. Nov 1 00:39:59.807463 kubelet[2261]: E1101 00:39:59.807429 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:39:59.808789 kubelet[2261]: I1101 00:39:59.808763 2261 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-20-5" Nov 1 00:39:59.809206 kubelet[2261]: E1101 00:39:59.809153 2261 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.20.5:6443/api/v1/nodes\": dial tcp 172.31.20.5:6443: connect: connection refused" node="ip-172-31-20-5" Nov 1 00:39:59.813763 systemd[1]: Created slice kubepods-burstable-podc096d459601835e2bd3f58709f231716.slice. Nov 1 00:39:59.815861 kubelet[2261]: E1101 00:39:59.815834 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:39:59.838006 kubelet[2261]: E1101 00:39:59.837882 2261 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-5?timeout=10s\": dial tcp 172.31.20.5:6443: connect: connection refused" interval="400ms" Nov 1 00:39:59.841539 kubelet[2261]: I1101 00:39:59.840536 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c096d459601835e2bd3f58709f231716-kubeconfig\") pod \"kube-scheduler-ip-172-31-20-5\" (UID: \"c096d459601835e2bd3f58709f231716\") " pod="kube-system/kube-scheduler-ip-172-31-20-5" Nov 1 00:39:59.841539 kubelet[2261]: I1101 00:39:59.840619 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84e214e259c9022f0cefa758b65402ff-k8s-certs\") pod \"kube-apiserver-ip-172-31-20-5\" (UID: \"84e214e259c9022f0cefa758b65402ff\") " pod="kube-system/kube-apiserver-ip-172-31-20-5" Nov 1 00:39:59.841539 kubelet[2261]: I1101 00:39:59.840739 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84e214e259c9022f0cefa758b65402ff-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-20-5\" (UID: \"84e214e259c9022f0cefa758b65402ff\") " pod="kube-system/kube-apiserver-ip-172-31-20-5" Nov 1 00:39:59.841539 kubelet[2261]: I1101 00:39:59.840765 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-ca-certs\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:39:59.841539 kubelet[2261]: I1101 00:39:59.840869 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:39:59.841773 kubelet[2261]: I1101 00:39:59.840908 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-k8s-certs\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:39:59.841773 kubelet[2261]: I1101 00:39:59.840983 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-kubeconfig\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:39:59.841773 kubelet[2261]: I1101 00:39:59.841015 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84e214e259c9022f0cefa758b65402ff-ca-certs\") pod \"kube-apiserver-ip-172-31-20-5\" (UID: \"84e214e259c9022f0cefa758b65402ff\") " pod="kube-system/kube-apiserver-ip-172-31-20-5" Nov 1 00:39:59.841773 kubelet[2261]: I1101 00:39:59.841114 2261 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:00.012864 kubelet[2261]: I1101 00:40:00.012829 2261 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-20-5" Nov 1 00:40:00.021026 kubelet[2261]: E1101 00:40:00.020961 2261 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.20.5:6443/api/v1/nodes\": dial tcp 172.31.20.5:6443: connect: connection refused" node="ip-172-31-20-5" Nov 1 00:40:00.116151 env[1734]: time="2025-11-01T00:40:00.108534799Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-20-5,Uid:63c1492c74a1264b47c1f18caeaf9495,Namespace:kube-system,Attempt:0,}" Nov 1 00:40:00.127621 env[1734]: time="2025-11-01T00:40:00.127353276Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-20-5,Uid:84e214e259c9022f0cefa758b65402ff,Namespace:kube-system,Attempt:0,}" Nov 1 00:40:00.127621 env[1734]: time="2025-11-01T00:40:00.127344266Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-20-5,Uid:c096d459601835e2bd3f58709f231716,Namespace:kube-system,Attempt:0,}" Nov 1 00:40:00.245271 kubelet[2261]: E1101 00:40:00.245173 2261 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-5?timeout=10s\": dial tcp 172.31.20.5:6443: connect: connection refused" interval="800ms" Nov 1 00:40:00.425891 kubelet[2261]: I1101 00:40:00.425485 2261 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-20-5" Nov 1 00:40:00.426074 kubelet[2261]: E1101 00:40:00.425936 2261 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.20.5:6443/api/v1/nodes\": dial tcp 172.31.20.5:6443: connect: connection refused" node="ip-172-31-20-5" Nov 1 00:40:00.627221 kubelet[2261]: W1101 00:40:00.627092 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.20.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:40:00.627221 kubelet[2261]: E1101 00:40:00.627179 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.20.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:00.703734 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3329813880.mount: Deactivated successfully. Nov 1 00:40:00.711558 env[1734]: time="2025-11-01T00:40:00.711462592Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.712813 env[1734]: time="2025-11-01T00:40:00.712751048Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.716880 env[1734]: time="2025-11-01T00:40:00.716786819Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.718371 env[1734]: time="2025-11-01T00:40:00.718322302Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.720370 env[1734]: time="2025-11-01T00:40:00.720328013Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.723596 env[1734]: time="2025-11-01T00:40:00.723333329Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.726461 env[1734]: time="2025-11-01T00:40:00.726419002Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.727661 env[1734]: time="2025-11-01T00:40:00.727616818Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.730217 env[1734]: time="2025-11-01T00:40:00.730141061Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.733296 env[1734]: time="2025-11-01T00:40:00.733242951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.736812 env[1734]: time="2025-11-01T00:40:00.736750893Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.742293 env[1734]: time="2025-11-01T00:40:00.742248455Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:00.789939 env[1734]: time="2025-11-01T00:40:00.789840843Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:40:00.790150 env[1734]: time="2025-11-01T00:40:00.789957863Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:40:00.790150 env[1734]: time="2025-11-01T00:40:00.789983355Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:40:00.790651 env[1734]: time="2025-11-01T00:40:00.790596330Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5d7732497a04b04d6896ee71ad1641b50c1cf40749a98949db425552ae2235c4 pid=2309 runtime=io.containerd.runc.v2 Nov 1 00:40:00.790957 env[1734]: time="2025-11-01T00:40:00.790792379Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:40:00.790957 env[1734]: time="2025-11-01T00:40:00.790823668Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:40:00.790957 env[1734]: time="2025-11-01T00:40:00.790833750Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:40:00.790957 env[1734]: time="2025-11-01T00:40:00.790936790Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a903e7eac38b0d07f4f8d7d1f94c8177b91c34a0eb726952ca0a848d2353838f pid=2311 runtime=io.containerd.runc.v2 Nov 1 00:40:00.801586 env[1734]: time="2025-11-01T00:40:00.801505413Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:40:00.801795 env[1734]: time="2025-11-01T00:40:00.801771767Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:40:00.801893 env[1734]: time="2025-11-01T00:40:00.801874994Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:40:00.802134 env[1734]: time="2025-11-01T00:40:00.802106989Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4fd46c24ade81e5646cfe64fd6b936a3bb21a6d6c9886dfe27dc8526745c5aac pid=2341 runtime=io.containerd.runc.v2 Nov 1 00:40:00.815147 systemd[1]: Started cri-containerd-5d7732497a04b04d6896ee71ad1641b50c1cf40749a98949db425552ae2235c4.scope. Nov 1 00:40:00.839710 systemd[1]: Started cri-containerd-a903e7eac38b0d07f4f8d7d1f94c8177b91c34a0eb726952ca0a848d2353838f.scope. Nov 1 00:40:00.843019 kubelet[2261]: W1101 00:40:00.842899 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.20.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:40:00.843019 kubelet[2261]: E1101 00:40:00.842988 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.20.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:00.849949 systemd[1]: Started cri-containerd-4fd46c24ade81e5646cfe64fd6b936a3bb21a6d6c9886dfe27dc8526745c5aac.scope. Nov 1 00:40:00.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.854000 audit: BPF prog-id=67 op=LOAD Nov 1 00:40:00.862000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.862000 audit[2333]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2309 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564373733323439376130346230346436383936656537316164313634 Nov 1 00:40:00.864000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.864000 audit[2333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2309 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564373733323439376130346230346436383936656537316164313634 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.865000 audit: BPF prog-id=68 op=LOAD Nov 1 00:40:00.865000 audit[2333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000383160 items=0 ppid=2309 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564373733323439376130346230346436383936656537316164313634 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.866000 audit: BPF prog-id=69 op=LOAD Nov 1 00:40:00.866000 audit[2333]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003831a8 items=0 ppid=2309 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564373733323439376130346230346436383936656537316164313634 Nov 1 00:40:00.867000 audit: BPF prog-id=69 op=UNLOAD Nov 1 00:40:00.867000 audit: BPF prog-id=68 op=UNLOAD Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { perfmon } for pid=2333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit[2333]: AVC avc: denied { bpf } for pid=2333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.867000 audit: BPF prog-id=70 op=LOAD Nov 1 00:40:00.867000 audit[2333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003835b8 items=0 ppid=2309 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564373733323439376130346230346436383936656537316164313634 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.881000 audit: BPF prog-id=71 op=LOAD Nov 1 00:40:00.882000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.882000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2311 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303365376561633338623064303766346638643764316639346338 Nov 1 00:40:00.882000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.882000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2311 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303365376561633338623064303766346638643764316639346338 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.885000 audit: BPF prog-id=72 op=LOAD Nov 1 00:40:00.885000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000288720 items=0 ppid=2311 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303365376561633338623064303766346638643764316639346338 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.886000 audit: BPF prog-id=73 op=LOAD Nov 1 00:40:00.886000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000288768 items=0 ppid=2311 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303365376561633338623064303766346638643764316639346338 Nov 1 00:40:00.887000 audit: BPF prog-id=73 op=UNLOAD Nov 1 00:40:00.887000 audit: BPF prog-id=72 op=UNLOAD Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.887000 audit: BPF prog-id=74 op=LOAD Nov 1 00:40:00.887000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000288b78 items=0 ppid=2311 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit: BPF prog-id=75 op=LOAD Nov 1 00:40:00.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303365376561633338623064303766346638643764316639346338 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2341 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643436633234616465383165353634366366653634666436623933 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2341 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643436633234616465383165353634366366653634666436623933 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.890000 audit: BPF prog-id=76 op=LOAD Nov 1 00:40:00.890000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002afda0 items=0 ppid=2341 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643436633234616465383165353634366366653634666436623933 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit: BPF prog-id=77 op=LOAD Nov 1 00:40:00.891000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002afde8 items=0 ppid=2341 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643436633234616465383165353634366366653634666436623933 Nov 1 00:40:00.891000 audit: BPF prog-id=77 op=UNLOAD Nov 1 00:40:00.891000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:00.891000 audit: BPF prog-id=78 op=LOAD Nov 1 00:40:00.891000 audit[2357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003261f8 items=0 ppid=2341 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:00.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643436633234616465383165353634366366653634666436623933 Nov 1 00:40:00.947026 env[1734]: time="2025-11-01T00:40:00.946961135Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-20-5,Uid:84e214e259c9022f0cefa758b65402ff,Namespace:kube-system,Attempt:0,} returns sandbox id \"5d7732497a04b04d6896ee71ad1641b50c1cf40749a98949db425552ae2235c4\"" Nov 1 00:40:00.950436 env[1734]: time="2025-11-01T00:40:00.949695123Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-20-5,Uid:63c1492c74a1264b47c1f18caeaf9495,Namespace:kube-system,Attempt:0,} returns sandbox id \"4fd46c24ade81e5646cfe64fd6b936a3bb21a6d6c9886dfe27dc8526745c5aac\"" Nov 1 00:40:00.954734 env[1734]: time="2025-11-01T00:40:00.953286575Z" level=info msg="CreateContainer within sandbox \"5d7732497a04b04d6896ee71ad1641b50c1cf40749a98949db425552ae2235c4\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:40:00.959764 env[1734]: time="2025-11-01T00:40:00.954705035Z" level=info msg="CreateContainer within sandbox \"4fd46c24ade81e5646cfe64fd6b936a3bb21a6d6c9886dfe27dc8526745c5aac\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:40:00.976940 env[1734]: time="2025-11-01T00:40:00.976881126Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-20-5,Uid:c096d459601835e2bd3f58709f231716,Namespace:kube-system,Attempt:0,} returns sandbox id \"a903e7eac38b0d07f4f8d7d1f94c8177b91c34a0eb726952ca0a848d2353838f\"" Nov 1 00:40:00.980854 env[1734]: time="2025-11-01T00:40:00.980808982Z" level=info msg="CreateContainer within sandbox \"a903e7eac38b0d07f4f8d7d1f94c8177b91c34a0eb726952ca0a848d2353838f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:40:00.995748 env[1734]: time="2025-11-01T00:40:00.995684926Z" level=info msg="CreateContainer within sandbox \"4fd46c24ade81e5646cfe64fd6b936a3bb21a6d6c9886dfe27dc8526745c5aac\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75\"" Nov 1 00:40:00.997610 env[1734]: time="2025-11-01T00:40:00.997569772Z" level=info msg="StartContainer for \"fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75\"" Nov 1 00:40:01.004878 env[1734]: time="2025-11-01T00:40:01.004824235Z" level=info msg="CreateContainer within sandbox \"5d7732497a04b04d6896ee71ad1641b50c1cf40749a98949db425552ae2235c4\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"87068f121a3a8703d38ef9cdf09cf51849870a86405fded8aec0a918515b3488\"" Nov 1 00:40:01.005958 env[1734]: time="2025-11-01T00:40:01.005918901Z" level=info msg="StartContainer for \"87068f121a3a8703d38ef9cdf09cf51849870a86405fded8aec0a918515b3488\"" Nov 1 00:40:01.008873 env[1734]: time="2025-11-01T00:40:01.008832226Z" level=info msg="CreateContainer within sandbox \"a903e7eac38b0d07f4f8d7d1f94c8177b91c34a0eb726952ca0a848d2353838f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419\"" Nov 1 00:40:01.010043 env[1734]: time="2025-11-01T00:40:01.009998111Z" level=info msg="StartContainer for \"10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419\"" Nov 1 00:40:01.027712 systemd[1]: Started cri-containerd-fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75.scope. Nov 1 00:40:01.046646 kubelet[2261]: E1101 00:40:01.046600 2261 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-5?timeout=10s\": dial tcp 172.31.20.5:6443: connect: connection refused" interval="1.6s" Nov 1 00:40:01.054490 systemd[1]: Started cri-containerd-10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419.scope. Nov 1 00:40:01.056695 kubelet[2261]: W1101 00:40:01.056428 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.20.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-5&limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:40:01.056695 kubelet[2261]: E1101 00:40:01.056533 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.20.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-5&limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:01.057073 kubelet[2261]: W1101 00:40:01.056926 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.20.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:40:01.057073 kubelet[2261]: E1101 00:40:01.056980 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.20.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.060000 audit: BPF prog-id=79 op=LOAD Nov 1 00:40:01.061000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.061000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2341 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663336132353730373432373533323938323462663030663232653265 Nov 1 00:40:01.061000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.061000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2341 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663336132353730373432373533323938323462663030663232653265 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.062000 audit: BPF prog-id=80 op=LOAD Nov 1 00:40:01.062000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000309760 items=0 ppid=2341 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663336132353730373432373533323938323462663030663232653265 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.065000 audit: BPF prog-id=81 op=LOAD Nov 1 00:40:01.065000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003097a8 items=0 ppid=2341 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663336132353730373432373533323938323462663030663232653265 Nov 1 00:40:01.066000 audit: BPF prog-id=81 op=UNLOAD Nov 1 00:40:01.066000 audit: BPF prog-id=80 op=UNLOAD Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.066000 audit: BPF prog-id=82 op=LOAD Nov 1 00:40:01.066000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000309bb8 items=0 ppid=2341 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663336132353730373432373533323938323462663030663232653265 Nov 1 00:40:01.077801 systemd[1]: Started cri-containerd-87068f121a3a8703d38ef9cdf09cf51849870a86405fded8aec0a918515b3488.scope. Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.094000 audit: BPF prog-id=83 op=LOAD Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2311 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130663532303966386461626636393230653630333635376132353861 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2311 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130663532303966386461626636393230653630333635376132353861 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.096000 audit: BPF prog-id=84 op=LOAD Nov 1 00:40:01.096000 audit[2463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00021a370 items=0 ppid=2311 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130663532303966386461626636393230653630333635376132353861 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.097000 audit: BPF prog-id=85 op=LOAD Nov 1 00:40:01.097000 audit[2463]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00021a3b8 items=0 ppid=2311 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130663532303966386461626636393230653630333635376132353861 Nov 1 00:40:01.098000 audit: BPF prog-id=85 op=UNLOAD Nov 1 00:40:01.099000 audit: BPF prog-id=84 op=UNLOAD Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { perfmon } for pid=2463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit[2463]: AVC avc: denied { bpf } for pid=2463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.099000 audit: BPF prog-id=86 op=LOAD Nov 1 00:40:01.099000 audit[2463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00021a7c8 items=0 ppid=2311 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130663532303966386461626636393230653630333635376132353861 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.123000 audit: BPF prog-id=87 op=LOAD Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2309 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837303638663132316133613837303364333865663963646630396366 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2309 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837303638663132316133613837303364333865663963646630396366 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.124000 audit: BPF prog-id=88 op=LOAD Nov 1 00:40:01.124000 audit[2464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003093a0 items=0 ppid=2309 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837303638663132316133613837303364333865663963646630396366 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.126000 audit: BPF prog-id=89 op=LOAD Nov 1 00:40:01.126000 audit[2464]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003093e8 items=0 ppid=2309 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837303638663132316133613837303364333865663963646630396366 Nov 1 00:40:01.127000 audit: BPF prog-id=89 op=UNLOAD Nov 1 00:40:01.128000 audit: BPF prog-id=88 op=UNLOAD Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { perfmon } for pid=2464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit[2464]: AVC avc: denied { bpf } for pid=2464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:01.128000 audit: BPF prog-id=90 op=LOAD Nov 1 00:40:01.128000 audit[2464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003097f8 items=0 ppid=2309 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:01.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837303638663132316133613837303364333865663963646630396366 Nov 1 00:40:01.183469 env[1734]: time="2025-11-01T00:40:01.183405679Z" level=info msg="StartContainer for \"10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419\" returns successfully" Nov 1 00:40:01.186378 env[1734]: time="2025-11-01T00:40:01.186324830Z" level=info msg="StartContainer for \"fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75\" returns successfully" Nov 1 00:40:01.228779 kubelet[2261]: I1101 00:40:01.228675 2261 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-20-5" Nov 1 00:40:01.233432 kubelet[2261]: E1101 00:40:01.229042 2261 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.20.5:6443/api/v1/nodes\": dial tcp 172.31.20.5:6443: connect: connection refused" node="ip-172-31-20-5" Nov 1 00:40:01.233690 env[1734]: time="2025-11-01T00:40:01.229713612Z" level=info msg="StartContainer for \"87068f121a3a8703d38ef9cdf09cf51849870a86405fded8aec0a918515b3488\" returns successfully" Nov 1 00:40:01.653260 kubelet[2261]: E1101 00:40:01.653131 2261 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.20.5:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:01.694533 kubelet[2261]: E1101 00:40:01.694484 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:01.703430 kubelet[2261]: E1101 00:40:01.703401 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:01.709077 kubelet[2261]: E1101 00:40:01.708914 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:02.483683 kubelet[2261]: W1101 00:40:02.483611 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.20.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:40:02.483957 kubelet[2261]: E1101 00:40:02.483935 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.20.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:02.658617 kubelet[2261]: E1101 00:40:02.658570 2261 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-5?timeout=10s\": dial tcp 172.31.20.5:6443: connect: connection refused" interval="3.2s" Nov 1 00:40:02.725108 kubelet[2261]: E1101 00:40:02.725078 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:02.726345 kubelet[2261]: E1101 00:40:02.726321 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:02.835044 kubelet[2261]: I1101 00:40:02.834945 2261 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-20-5" Nov 1 00:40:02.836507 kubelet[2261]: E1101 00:40:02.835983 2261 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.20.5:6443/api/v1/nodes\": dial tcp 172.31.20.5:6443: connect: connection refused" node="ip-172-31-20-5" Nov 1 00:40:02.871893 kubelet[2261]: W1101 00:40:02.871826 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.20.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:40:02.872176 kubelet[2261]: E1101 00:40:02.872150 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.20.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:04.124685 kubelet[2261]: W1101 00:40:04.124620 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.20.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:40:04.125431 kubelet[2261]: E1101 00:40:04.125399 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.20.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:04.239311 kubelet[2261]: W1101 00:40:04.239245 2261 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.20.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-5&limit=500&resourceVersion=0": dial tcp 172.31.20.5:6443: connect: connection refused Nov 1 00:40:04.239540 kubelet[2261]: E1101 00:40:04.239521 2261 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.20.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-5&limit=500&resourceVersion=0\": dial tcp 172.31.20.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:40:05.333282 kubelet[2261]: E1101 00:40:05.333252 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:05.478000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:05.494434 kernel: kauditd_printk_skb: 385 callbacks suppressed Nov 1 00:40:05.494715 kernel: audit: type=1400 audit(1761957605.478:464): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:05.478000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003771d0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:05.478000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:05.517306 kernel: audit: type=1300 audit(1761957605.478:464): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003771d0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:05.517459 kernel: audit: type=1327 audit(1761957605.478:464): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:05.479000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:05.527015 kernel: audit: type=1400 audit(1761957605.479:465): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:05.479000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003e0420 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:05.543928 kernel: audit: type=1300 audit(1761957605.479:465): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003e0420 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:05.544087 kernel: audit: type=1327 audit(1761957605.479:465): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:05.479000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:05.544200 kubelet[2261]: E1101 00:40:05.543504 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:06.039793 kubelet[2261]: I1101 00:40:06.039762 2261 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-20-5" Nov 1 00:40:06.477000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=524564 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:06.477000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c005daa7e0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:40:06.494892 kernel: audit: type=1400 audit(1761957606.477:466): avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=524564 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:06.495067 kernel: audit: type=1300 audit(1761957606.477:466): arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c005daa7e0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:40:06.495125 kernel: audit: type=1327 audit(1761957606.477:466): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:40:06.477000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:40:06.505000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:06.521078 kernel: audit: type=1400 audit(1761957606.505:467): avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:06.505000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0028cdfe0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:40:06.505000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:40:06.505000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:06.505000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c006b63d70 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:40:06.505000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:40:06.515000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=524570 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:06.515000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c005daaba0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:40:06.515000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:40:06.531000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:06.531000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c0024c0a00 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:40:06.531000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:40:06.536000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:06.536000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c003762ea0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:40:06.536000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:40:06.674939 kubelet[2261]: E1101 00:40:06.674895 2261 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:06.773942 kubelet[2261]: I1101 00:40:06.773841 2261 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-20-5" Nov 1 00:40:06.773942 kubelet[2261]: E1101 00:40:06.773881 2261 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ip-172-31-20-5\": node \"ip-172-31-20-5\" not found" Nov 1 00:40:06.792873 kubelet[2261]: E1101 00:40:06.792836 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:06.893604 kubelet[2261]: E1101 00:40:06.893559 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:06.994293 kubelet[2261]: E1101 00:40:06.994249 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.094645 kubelet[2261]: E1101 00:40:07.094515 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.195147 kubelet[2261]: E1101 00:40:07.195097 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.254817 kubelet[2261]: E1101 00:40:07.254792 2261 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-20-5\" not found" node="ip-172-31-20-5" Nov 1 00:40:07.296263 kubelet[2261]: E1101 00:40:07.296213 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.397458 kubelet[2261]: E1101 00:40:07.397342 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.498498 kubelet[2261]: E1101 00:40:07.498447 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.600753 kubelet[2261]: E1101 00:40:07.599942 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.700909 kubelet[2261]: E1101 00:40:07.700779 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.802072 kubelet[2261]: E1101 00:40:07.801900 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:07.902735 kubelet[2261]: E1101 00:40:07.902697 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.007714 kubelet[2261]: E1101 00:40:08.007451 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.108302 kubelet[2261]: E1101 00:40:08.108261 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.209332 kubelet[2261]: E1101 00:40:08.209293 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.310928 kubelet[2261]: E1101 00:40:08.310774 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.411903 kubelet[2261]: E1101 00:40:08.411862 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.513298 kubelet[2261]: E1101 00:40:08.513250 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.613893 kubelet[2261]: E1101 00:40:08.613772 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.714728 kubelet[2261]: E1101 00:40:08.714690 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.816174 kubelet[2261]: E1101 00:40:08.816116 2261 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-20-5\" not found" Nov 1 00:40:08.932651 kubelet[2261]: I1101 00:40:08.931847 2261 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-20-5" Nov 1 00:40:08.944876 kubelet[2261]: I1101 00:40:08.944830 2261 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-20-5" Nov 1 00:40:08.950689 kubelet[2261]: I1101 00:40:08.950650 2261 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:09.038848 systemd[1]: Reloading. Nov 1 00:40:09.122113 /usr/lib/systemd/system-generators/torcx-generator[2553]: time="2025-11-01T00:40:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:40:09.122152 /usr/lib/systemd/system-generators/torcx-generator[2553]: time="2025-11-01T00:40:09Z" level=info msg="torcx already run" Nov 1 00:40:09.249064 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:40:09.249087 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:40:09.269203 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.365000 audit: BPF prog-id=91 op=LOAD Nov 1 00:40:09.365000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit: BPF prog-id=92 op=LOAD Nov 1 00:40:09.366000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit: BPF prog-id=93 op=LOAD Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.367000 audit: BPF prog-id=94 op=LOAD Nov 1 00:40:09.367000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:40:09.367000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit: BPF prog-id=95 op=LOAD Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.368000 audit: BPF prog-id=96 op=LOAD Nov 1 00:40:09.368000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:40:09.369000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.370000 audit: BPF prog-id=97 op=LOAD Nov 1 00:40:09.370000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.371000 audit: BPF prog-id=98 op=LOAD Nov 1 00:40:09.371000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.372000 audit: BPF prog-id=99 op=LOAD Nov 1 00:40:09.372000 audit: BPF prog-id=83 op=UNLOAD Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.373000 audit: BPF prog-id=100 op=LOAD Nov 1 00:40:09.373000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit: BPF prog-id=101 op=LOAD Nov 1 00:40:09.375000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.375000 audit: BPF prog-id=102 op=LOAD Nov 1 00:40:09.375000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.377000 audit: BPF prog-id=103 op=LOAD Nov 1 00:40:09.377000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.378000 audit: BPF prog-id=104 op=LOAD Nov 1 00:40:09.378000 audit: BPF prog-id=87 op=UNLOAD Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.379000 audit: BPF prog-id=105 op=LOAD Nov 1 00:40:09.379000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit: BPF prog-id=106 op=LOAD Nov 1 00:40:09.381000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit: BPF prog-id=107 op=LOAD Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.381000 audit: BPF prog-id=108 op=LOAD Nov 1 00:40:09.381000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:40:09.381000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit: BPF prog-id=109 op=LOAD Nov 1 00:40:09.384000 audit: BPF prog-id=64 op=UNLOAD Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.384000 audit: BPF prog-id=110 op=LOAD Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:09.385000 audit: BPF prog-id=111 op=LOAD Nov 1 00:40:09.385000 audit: BPF prog-id=65 op=UNLOAD Nov 1 00:40:09.385000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:40:09.404540 systemd[1]: Stopping kubelet.service... Nov 1 00:40:09.430468 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:40:09.430665 systemd[1]: Stopped kubelet.service. Nov 1 00:40:09.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:40:09.430735 systemd[1]: kubelet.service: Consumed 1.008s CPU time. Nov 1 00:40:09.432865 systemd[1]: Starting kubelet.service... Nov 1 00:40:10.669000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=524595 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:40:10.672677 kernel: kauditd_printk_skb: 259 callbacks suppressed Nov 1 00:40:10.672798 kernel: audit: type=1400 audit(1761957610.669:717): avc: denied { watch } for pid=2458 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=524595 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:40:10.669000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006e6a80 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:10.691735 kernel: audit: type=1300 audit(1761957610.669:717): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006e6a80 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:10.691855 kernel: audit: type=1327 audit(1761957610.669:717): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:10.669000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:10.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:40:10.803738 systemd[1]: Started kubelet.service. Nov 1 00:40:10.813079 kernel: audit: type=1130 audit(1761957610.804:718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:40:10.923912 kubelet[2612]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:40:10.924511 kubelet[2612]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:40:10.924592 kubelet[2612]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:40:10.924833 kubelet[2612]: I1101 00:40:10.924800 2612 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:40:10.935328 kubelet[2612]: I1101 00:40:10.935296 2612 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:40:10.935592 kubelet[2612]: I1101 00:40:10.935577 2612 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:40:10.935995 kubelet[2612]: I1101 00:40:10.935975 2612 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:40:10.937762 kubelet[2612]: I1101 00:40:10.937741 2612 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Nov 1 00:40:10.941016 kubelet[2612]: I1101 00:40:10.940936 2612 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:40:10.954394 kubelet[2612]: E1101 00:40:10.954342 2612 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:40:10.954569 kubelet[2612]: I1101 00:40:10.954452 2612 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:40:10.957685 kubelet[2612]: I1101 00:40:10.957653 2612 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:40:10.958160 kubelet[2612]: I1101 00:40:10.958119 2612 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:40:10.958513 kubelet[2612]: I1101 00:40:10.958267 2612 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-20-5","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:40:10.958708 kubelet[2612]: I1101 00:40:10.958694 2612 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:40:10.958785 kubelet[2612]: I1101 00:40:10.958778 2612 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:40:10.958882 kubelet[2612]: I1101 00:40:10.958875 2612 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:40:10.959104 kubelet[2612]: I1101 00:40:10.959094 2612 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:40:10.963685 kubelet[2612]: I1101 00:40:10.963664 2612 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:40:10.963854 kubelet[2612]: I1101 00:40:10.963846 2612 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:40:10.963908 kubelet[2612]: I1101 00:40:10.963903 2612 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:40:10.971199 kubelet[2612]: I1101 00:40:10.971167 2612 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:40:10.971719 kubelet[2612]: I1101 00:40:10.971698 2612 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:40:10.971919 kubelet[2612]: I1101 00:40:10.971907 2612 apiserver.go:52] "Watching apiserver" Nov 1 00:40:10.973838 kubelet[2612]: I1101 00:40:10.972244 2612 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:40:10.973838 kubelet[2612]: I1101 00:40:10.972287 2612 server.go:1287] "Started kubelet" Nov 1 00:40:10.975000 audit[2612]: AVC avc: denied { mac_admin } for pid=2612 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:10.983377 kubelet[2612]: I1101 00:40:10.975349 2612 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:40:10.983377 kubelet[2612]: I1101 00:40:10.975396 2612 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:40:10.983377 kubelet[2612]: I1101 00:40:10.975442 2612 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:40:10.988548 kernel: audit: type=1400 audit(1761957610.975:719): avc: denied { mac_admin } for pid=2612 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:10.988747 kernel: audit: type=1401 audit(1761957610.975:719): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:40:10.975000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:40:10.990018 kubelet[2612]: I1101 00:40:10.989415 2612 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:40:10.975000 audit[2612]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000aebad0 a1=c00072fdb8 a2=c000aebaa0 a3=25 items=0 ppid=1 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:10.991900 kubelet[2612]: I1101 00:40:10.990728 2612 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:40:10.993985 kubelet[2612]: I1101 00:40:10.993924 2612 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:40:10.994341 kubelet[2612]: I1101 00:40:10.994325 2612 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:40:10.994700 kubelet[2612]: I1101 00:40:10.994683 2612 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:40:10.997202 kubelet[2612]: I1101 00:40:10.997176 2612 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:40:11.000120 kubelet[2612]: I1101 00:40:11.000097 2612 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:40:11.000742 kubelet[2612]: I1101 00:40:11.000728 2612 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:40:11.003072 kernel: audit: type=1300 audit(1761957610.975:719): arch=c000003e syscall=188 success=no exit=-22 a0=c000aebad0 a1=c00072fdb8 a2=c000aebaa0 a3=25 items=0 ppid=1 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:11.007949 kubelet[2612]: I1101 00:40:11.007924 2612 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:40:11.008352 kubelet[2612]: I1101 00:40:11.008330 2612 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:40:11.022785 kernel: audit: type=1327 audit(1761957610.975:719): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:40:10.975000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:40:11.022987 kubelet[2612]: I1101 00:40:11.014152 2612 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:40:10.975000 audit[2612]: AVC avc: denied { mac_admin } for pid=2612 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:11.032131 kernel: audit: type=1400 audit(1761957610.975:720): avc: denied { mac_admin } for pid=2612 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:10.975000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:40:11.038876 kernel: audit: type=1401 audit(1761957610.975:720): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:40:10.975000 audit[2612]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a64240 a1=c00072fdd0 a2=c000aebb60 a3=25 items=0 ppid=1 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:10.975000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:40:11.042942 kubelet[2612]: I1101 00:40:11.042887 2612 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:40:11.047659 kubelet[2612]: I1101 00:40:11.046083 2612 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:40:11.047659 kubelet[2612]: I1101 00:40:11.046124 2612 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:40:11.047659 kubelet[2612]: I1101 00:40:11.046159 2612 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:40:11.047659 kubelet[2612]: I1101 00:40:11.046168 2612 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:40:11.047659 kubelet[2612]: E1101 00:40:11.046233 2612 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:40:11.091000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:11.091000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d21760 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:11.091000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:11.092000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:11.092000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0006ec500 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:11.092000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:11.093000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:11.093000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0006ec540 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:11.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:11.093000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:40:11.093000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0006ec580 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:40:11.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:40:11.127279 kubelet[2612]: I1101 00:40:11.127255 2612 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:40:11.127449 kubelet[2612]: I1101 00:40:11.127437 2612 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:40:11.127654 kubelet[2612]: I1101 00:40:11.127643 2612 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:40:11.127930 kubelet[2612]: I1101 00:40:11.127915 2612 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:40:11.128137 kubelet[2612]: I1101 00:40:11.128111 2612 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:40:11.128223 kubelet[2612]: I1101 00:40:11.128217 2612 policy_none.go:49] "None policy: Start" Nov 1 00:40:11.128285 kubelet[2612]: I1101 00:40:11.128271 2612 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:40:11.128342 kubelet[2612]: I1101 00:40:11.128336 2612 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:40:11.128593 kubelet[2612]: I1101 00:40:11.128583 2612 state_mem.go:75] "Updated machine memory state" Nov 1 00:40:11.134906 kubelet[2612]: I1101 00:40:11.134862 2612 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:40:11.135170 kubelet[2612]: I1101 00:40:11.135136 2612 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:40:11.134000 audit[2612]: AVC avc: denied { mac_admin } for pid=2612 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:11.134000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:40:11.134000 audit[2612]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000baf110 a1=c00104c228 a2=c000baf0e0 a3=25 items=0 ppid=1 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:11.134000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:40:11.135704 kubelet[2612]: I1101 00:40:11.135689 2612 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:40:11.135849 kubelet[2612]: I1101 00:40:11.135812 2612 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:40:11.137090 kubelet[2612]: I1101 00:40:11.137070 2612 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:40:11.142586 kubelet[2612]: E1101 00:40:11.142515 2612 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:40:11.152867 kubelet[2612]: I1101 00:40:11.152838 2612 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:11.167954 kubelet[2612]: E1101 00:40:11.167919 2612 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-20-5\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:11.203494 kubelet[2612]: I1101 00:40:11.202913 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-k8s-certs\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:11.203717 kubelet[2612]: I1101 00:40:11.203695 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-kubeconfig\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:11.203803 kubelet[2612]: I1101 00:40:11.203790 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:11.203904 kubelet[2612]: I1101 00:40:11.203878 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c096d459601835e2bd3f58709f231716-kubeconfig\") pod \"kube-scheduler-ip-172-31-20-5\" (UID: \"c096d459601835e2bd3f58709f231716\") " pod="kube-system/kube-scheduler-ip-172-31-20-5" Nov 1 00:40:11.203980 kubelet[2612]: I1101 00:40:11.203970 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-ca-certs\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:11.204215 kubelet[2612]: I1101 00:40:11.204201 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/63c1492c74a1264b47c1f18caeaf9495-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-20-5\" (UID: \"63c1492c74a1264b47c1f18caeaf9495\") " pod="kube-system/kube-controller-manager-ip-172-31-20-5" Nov 1 00:40:11.273845 kubelet[2612]: I1101 00:40:11.272840 2612 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-20-5" Nov 1 00:40:11.284348 kubelet[2612]: I1101 00:40:11.284018 2612 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-20-5" Nov 1 00:40:11.284348 kubelet[2612]: I1101 00:40:11.284314 2612 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-20-5" Nov 1 00:40:11.300986 kubelet[2612]: I1101 00:40:11.300796 2612 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:40:11.301608 kubelet[2612]: I1101 00:40:11.301553 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-20-5" podStartSLOduration=3.301541276 podStartE2EDuration="3.301541276s" podCreationTimestamp="2025-11-01 00:40:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:40:11.287895885 +0000 UTC m=+0.466599545" watchObservedRunningTime="2025-11-01 00:40:11.301541276 +0000 UTC m=+0.480244930" Nov 1 00:40:11.308589 kubelet[2612]: I1101 00:40:11.308269 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84e214e259c9022f0cefa758b65402ff-ca-certs\") pod \"kube-apiserver-ip-172-31-20-5\" (UID: \"84e214e259c9022f0cefa758b65402ff\") " pod="kube-system/kube-apiserver-ip-172-31-20-5" Nov 1 00:40:11.308589 kubelet[2612]: I1101 00:40:11.308321 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84e214e259c9022f0cefa758b65402ff-k8s-certs\") pod \"kube-apiserver-ip-172-31-20-5\" (UID: \"84e214e259c9022f0cefa758b65402ff\") " pod="kube-system/kube-apiserver-ip-172-31-20-5" Nov 1 00:40:11.308589 kubelet[2612]: I1101 00:40:11.308354 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84e214e259c9022f0cefa758b65402ff-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-20-5\" (UID: \"84e214e259c9022f0cefa758b65402ff\") " pod="kube-system/kube-apiserver-ip-172-31-20-5" Nov 1 00:40:11.315145 kubelet[2612]: I1101 00:40:11.314222 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-20-5" podStartSLOduration=3.314204287 podStartE2EDuration="3.314204287s" podCreationTimestamp="2025-11-01 00:40:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:40:11.31409999 +0000 UTC m=+0.492803648" watchObservedRunningTime="2025-11-01 00:40:11.314204287 +0000 UTC m=+0.492907949" Nov 1 00:40:11.325361 kubelet[2612]: I1101 00:40:11.325299 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-20-5" podStartSLOduration=3.325280887 podStartE2EDuration="3.325280887s" podCreationTimestamp="2025-11-01 00:40:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:40:11.324617381 +0000 UTC m=+0.503321050" watchObservedRunningTime="2025-11-01 00:40:11.325280887 +0000 UTC m=+0.503984545" Nov 1 00:40:14.143658 update_engine[1725]: I1101 00:40:14.143610 1725 update_attempter.cc:509] Updating boot flags... Nov 1 00:40:15.241853 kubelet[2612]: I1101 00:40:15.241801 2612 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:40:15.242355 env[1734]: time="2025-11-01T00:40:15.242298808Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:40:15.242669 kubelet[2612]: I1101 00:40:15.242608 2612 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:40:16.145590 systemd[1]: Created slice kubepods-besteffort-pod9e7cea78_084c_4e41_a849_dcb335eddea2.slice. Nov 1 00:40:16.146685 kubelet[2612]: I1101 00:40:16.146649 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/9e7cea78-084c-4e41-a849-dcb335eddea2-kube-proxy\") pod \"kube-proxy-c9smn\" (UID: \"9e7cea78-084c-4e41-a849-dcb335eddea2\") " pod="kube-system/kube-proxy-c9smn" Nov 1 00:40:16.146813 kubelet[2612]: I1101 00:40:16.146698 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9e7cea78-084c-4e41-a849-dcb335eddea2-xtables-lock\") pod \"kube-proxy-c9smn\" (UID: \"9e7cea78-084c-4e41-a849-dcb335eddea2\") " pod="kube-system/kube-proxy-c9smn" Nov 1 00:40:16.146813 kubelet[2612]: I1101 00:40:16.146727 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9e7cea78-084c-4e41-a849-dcb335eddea2-lib-modules\") pod \"kube-proxy-c9smn\" (UID: \"9e7cea78-084c-4e41-a849-dcb335eddea2\") " pod="kube-system/kube-proxy-c9smn" Nov 1 00:40:16.146813 kubelet[2612]: I1101 00:40:16.146758 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s24qv\" (UniqueName: \"kubernetes.io/projected/9e7cea78-084c-4e41-a849-dcb335eddea2-kube-api-access-s24qv\") pod \"kube-proxy-c9smn\" (UID: \"9e7cea78-084c-4e41-a849-dcb335eddea2\") " pod="kube-system/kube-proxy-c9smn" Nov 1 00:40:16.263797 kubelet[2612]: I1101 00:40:16.263723 2612 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:40:16.349888 systemd[1]: Created slice kubepods-besteffort-pod46175887_daad_4c40_814b_964edca9b022.slice. Nov 1 00:40:16.449494 kubelet[2612]: I1101 00:40:16.449362 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dmtws\" (UniqueName: \"kubernetes.io/projected/46175887-daad-4c40-814b-964edca9b022-kube-api-access-dmtws\") pod \"tigera-operator-7dcd859c48-fxjmv\" (UID: \"46175887-daad-4c40-814b-964edca9b022\") " pod="tigera-operator/tigera-operator-7dcd859c48-fxjmv" Nov 1 00:40:16.449494 kubelet[2612]: I1101 00:40:16.449422 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/46175887-daad-4c40-814b-964edca9b022-var-lib-calico\") pod \"tigera-operator-7dcd859c48-fxjmv\" (UID: \"46175887-daad-4c40-814b-964edca9b022\") " pod="tigera-operator/tigera-operator-7dcd859c48-fxjmv" Nov 1 00:40:16.456625 env[1734]: time="2025-11-01T00:40:16.456569033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-c9smn,Uid:9e7cea78-084c-4e41-a849-dcb335eddea2,Namespace:kube-system,Attempt:0,}" Nov 1 00:40:16.482625 env[1734]: time="2025-11-01T00:40:16.481825785Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:40:16.482625 env[1734]: time="2025-11-01T00:40:16.481942028Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:40:16.482625 env[1734]: time="2025-11-01T00:40:16.481977139Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:40:16.482625 env[1734]: time="2025-11-01T00:40:16.482440211Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/10e58ccf71e2457b0fb7572390e5cc7a6a75d21bdeb9ece5591768583624fec7 pid=2760 runtime=io.containerd.runc.v2 Nov 1 00:40:16.517624 systemd[1]: Started cri-containerd-10e58ccf71e2457b0fb7572390e5cc7a6a75d21bdeb9ece5591768583624fec7.scope. Nov 1 00:40:16.537995 kernel: kauditd_printk_skb: 18 callbacks suppressed Nov 1 00:40:16.538174 kernel: audit: type=1400 audit(1761957616.528:726): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.544558 amazon-ssm-agent[1797]: 2025-11-01 00:40:16 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.553578 kernel: audit: type=1400 audit(1761957616.528:727): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.553733 kernel: audit: type=1400 audit(1761957616.528:728): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.553810 kernel: audit: type=1400 audit(1761957616.528:729): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.573657 kernel: audit: type=1400 audit(1761957616.528:730): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.573782 kernel: audit: type=1400 audit(1761957616.528:731): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.588787 kernel: audit: type=1400 audit(1761957616.528:732): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.592492 kernel: audit: type=1400 audit(1761957616.528:733): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.592592 kernel: audit: type=1400 audit(1761957616.528:734): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.597135 kernel: audit: type=1400 audit(1761957616.537:735): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.537000 audit: BPF prog-id=112 op=LOAD Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2760 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130653538636366373165323435376230666237353732333930653563 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2760 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130653538636366373165323435376230666237353732333930653563 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.540000 audit: BPF prog-id=113 op=LOAD Nov 1 00:40:16.540000 audit[2772]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030e4f0 items=0 ppid=2760 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130653538636366373165323435376230666237353732333930653563 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit: BPF prog-id=114 op=LOAD Nov 1 00:40:16.543000 audit[2772]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030e538 items=0 ppid=2760 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130653538636366373165323435376230666237353732333930653563 Nov 1 00:40:16.543000 audit: BPF prog-id=114 op=UNLOAD Nov 1 00:40:16.543000 audit: BPF prog-id=113 op=UNLOAD Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { perfmon } for pid=2772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit[2772]: AVC avc: denied { bpf } for pid=2772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.543000 audit: BPF prog-id=115 op=LOAD Nov 1 00:40:16.543000 audit[2772]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030e948 items=0 ppid=2760 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130653538636366373165323435376230666237353732333930653563 Nov 1 00:40:16.613887 env[1734]: time="2025-11-01T00:40:16.613838967Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-c9smn,Uid:9e7cea78-084c-4e41-a849-dcb335eddea2,Namespace:kube-system,Attempt:0,} returns sandbox id \"10e58ccf71e2457b0fb7572390e5cc7a6a75d21bdeb9ece5591768583624fec7\"" Nov 1 00:40:16.619148 env[1734]: time="2025-11-01T00:40:16.619085740Z" level=info msg="CreateContainer within sandbox \"10e58ccf71e2457b0fb7572390e5cc7a6a75d21bdeb9ece5591768583624fec7\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:40:16.657104 env[1734]: time="2025-11-01T00:40:16.656862521Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-fxjmv,Uid:46175887-daad-4c40-814b-964edca9b022,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:40:16.657465 env[1734]: time="2025-11-01T00:40:16.657426210Z" level=info msg="CreateContainer within sandbox \"10e58ccf71e2457b0fb7572390e5cc7a6a75d21bdeb9ece5591768583624fec7\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"5c9ff501fa9b94aabc70cfb3dec1702aa2d1b26199c2270053ceef3910bdd525\"" Nov 1 00:40:16.658226 env[1734]: time="2025-11-01T00:40:16.658169084Z" level=info msg="StartContainer for \"5c9ff501fa9b94aabc70cfb3dec1702aa2d1b26199c2270053ceef3910bdd525\"" Nov 1 00:40:16.683434 systemd[1]: Started cri-containerd-5c9ff501fa9b94aabc70cfb3dec1702aa2d1b26199c2270053ceef3910bdd525.scope. Nov 1 00:40:16.697738 env[1734]: time="2025-11-01T00:40:16.697644803Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:40:16.697889 env[1734]: time="2025-11-01T00:40:16.697752406Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:40:16.697889 env[1734]: time="2025-11-01T00:40:16.697783505Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:40:16.698085 env[1734]: time="2025-11-01T00:40:16.698029966Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/34f2b24f37f5239b54d18671c5af851f9d969a6759017b114df730bae7943755 pid=2821 runtime=io.containerd.runc.v2 Nov 1 00:40:16.717857 systemd[1]: Started cri-containerd-34f2b24f37f5239b54d18671c5af851f9d969a6759017b114df730bae7943755.scope. Nov 1 00:40:16.736000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.736000 audit[2806]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014f6b0 a2=3c a3=7f56b0439718 items=0 ppid=2760 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396666353031666139623934616162633730636662336465633137 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit: BPF prog-id=116 op=LOAD Nov 1 00:40:16.737000 audit[2806]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014f9d8 a2=78 a3=c00020b618 items=0 ppid=2760 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396666353031666139623934616162633730636662336465633137 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.737000 audit: BPF prog-id=117 op=LOAD Nov 1 00:40:16.737000 audit[2806]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014f770 a2=78 a3=c00020b668 items=0 ppid=2760 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396666353031666139623934616162633730636662336465633137 Nov 1 00:40:16.738000 audit: BPF prog-id=117 op=UNLOAD Nov 1 00:40:16.738000 audit: BPF prog-id=116 op=UNLOAD Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { perfmon } for pid=2806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit[2806]: AVC avc: denied { bpf } for pid=2806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.738000 audit: BPF prog-id=118 op=LOAD Nov 1 00:40:16.738000 audit[2806]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014fc30 a2=78 a3=c00020b6f8 items=0 ppid=2760 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396666353031666139623934616162633730636662336465633137 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.762000 audit: BPF prog-id=119 op=LOAD Nov 1 00:40:16.763000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.763000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2821 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334663262323466333766353233396235346431383637316335616638 Nov 1 00:40:16.763000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.763000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2821 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334663262323466333766353233396235346431383637316335616638 Nov 1 00:40:16.764210 env[1734]: time="2025-11-01T00:40:16.764121650Z" level=info msg="StartContainer for \"5c9ff501fa9b94aabc70cfb3dec1702aa2d1b26199c2270053ceef3910bdd525\" returns successfully" Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.765000 audit: BPF prog-id=120 op=LOAD Nov 1 00:40:16.765000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00009acf0 items=0 ppid=2821 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334663262323466333766353233396235346431383637316335616638 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit: BPF prog-id=121 op=LOAD Nov 1 00:40:16.766000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00009ad38 items=0 ppid=2821 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334663262323466333766353233396235346431383637316335616638 Nov 1 00:40:16.766000 audit: BPF prog-id=121 op=UNLOAD Nov 1 00:40:16.766000 audit: BPF prog-id=120 op=UNLOAD Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:16.766000 audit: BPF prog-id=122 op=LOAD Nov 1 00:40:16.766000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00009b148 items=0 ppid=2821 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:16.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334663262323466333766353233396235346431383637316335616638 Nov 1 00:40:16.809797 env[1734]: time="2025-11-01T00:40:16.809740620Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-fxjmv,Uid:46175887-daad-4c40-814b-964edca9b022,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"34f2b24f37f5239b54d18671c5af851f9d969a6759017b114df730bae7943755\"" Nov 1 00:40:16.811880 env[1734]: time="2025-11-01T00:40:16.811837624Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:40:17.140632 kubelet[2612]: I1101 00:40:17.140559 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-c9smn" podStartSLOduration=1.140535238 podStartE2EDuration="1.140535238s" podCreationTimestamp="2025-11-01 00:40:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:40:17.12878552 +0000 UTC m=+6.307489239" watchObservedRunningTime="2025-11-01 00:40:17.140535238 +0000 UTC m=+6.319238897" Nov 1 00:40:17.868520 env[1734]: time="2025-11-01T00:40:17.868398569Z" level=error msg="PullImage \"quay.io/tigera/operator:v1.38.7\" failed" error="failed to pull and unpack image \"quay.io/tigera/operator:v1.38.7\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn01.quay.io/quayio-production-s3/sha256/f2/f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20251101%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20251101T004017Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=b71e743d8249630c2fc3507323d1881ea72fc5b52268910f630be2dcd4719566®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1761958517~hmac=fbb0495df88e983cfe0aaadb925a78c72b5b7016ae992398194c975ae69d754b\": dial tcp: lookup cdn01.quay.io: no such host" Nov 1 00:40:17.869039 kubelet[2612]: E1101 00:40:17.868818 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/tigera/operator:v1.38.7\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn01.quay.io/quayio-production-s3/sha256/f2/f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20251101%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20251101T004017Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=b71e743d8249630c2fc3507323d1881ea72fc5b52268910f630be2dcd4719566®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1761958517~hmac=fbb0495df88e983cfe0aaadb925a78c72b5b7016ae992398194c975ae69d754b\": dial tcp: lookup cdn01.quay.io: no such host" image="quay.io/tigera/operator:v1.38.7" Nov 1 00:40:17.869039 kubelet[2612]: E1101 00:40:17.868889 2612 kuberuntime_image.go:55] "Failed to pull image" err="failed to pull and unpack image \"quay.io/tigera/operator:v1.38.7\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn01.quay.io/quayio-production-s3/sha256/f2/f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20251101%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20251101T004017Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=b71e743d8249630c2fc3507323d1881ea72fc5b52268910f630be2dcd4719566®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1761958517~hmac=fbb0495df88e983cfe0aaadb925a78c72b5b7016ae992398194c975ae69d754b\": dial tcp: lookup cdn01.quay.io: no such host" image="quay.io/tigera/operator:v1.38.7" Nov 1 00:40:17.870729 kubelet[2612]: E1101 00:40:17.870641 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:tigera-operator,Image:quay.io/tigera/operator:v1.38.7,Command:[operator],Args:[-manage-crds=true],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:WATCH_NAMESPACE,Value:,ValueFrom:nil,},EnvVar{Name:POD_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.name,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:OPERATOR_NAME,Value:tigera-operator,ValueFrom:nil,},EnvVar{Name:TIGERA_OPERATOR_INIT_IMAGE_VERSION,Value:v1.38.7,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:var-lib-calico,ReadOnly:true,MountPath:/var/lib/calico,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dmtws,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{EnvFromSource{Prefix:,ConfigMapRef:&ConfigMapEnvSource{LocalObjectReference:LocalObjectReference{Name:kubernetes-services-endpoint,},Optional:*true,},SecretRef:nil,},},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod tigera-operator-7dcd859c48-fxjmv_tigera-operator(46175887-daad-4c40-814b-964edca9b022): ErrImagePull: failed to pull and unpack image \"quay.io/tigera/operator:v1.38.7\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn01.quay.io/quayio-production-s3/sha256/f2/f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20251101%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20251101T004017Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=b71e743d8249630c2fc3507323d1881ea72fc5b52268910f630be2dcd4719566®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1761958517~hmac=fbb0495df88e983cfe0aaadb925a78c72b5b7016ae992398194c975ae69d754b\": dial tcp: lookup cdn01.quay.io: no such host" logger="UnhandledError" Nov 1 00:40:17.872017 kubelet[2612]: E1101 00:40:17.871955 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with ErrImagePull: \"failed to pull and unpack image \\\"quay.io/tigera/operator:v1.38.7\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn01.quay.io/quayio-production-s3/sha256/f2/f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20251101%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20251101T004017Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=b71e743d8249630c2fc3507323d1881ea72fc5b52268910f630be2dcd4719566®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1761958517~hmac=fbb0495df88e983cfe0aaadb925a78c72b5b7016ae992398194c975ae69d754b\\\": dial tcp: lookup cdn01.quay.io: no such host\"" pod="tigera-operator/tigera-operator-7dcd859c48-fxjmv" podUID="46175887-daad-4c40-814b-964edca9b022" Nov 1 00:40:18.124866 kubelet[2612]: E1101 00:40:18.124729 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/tigera/operator:v1.38.7\\\": ErrImagePull: failed to pull and unpack image \\\"quay.io/tigera/operator:v1.38.7\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn01.quay.io/quayio-production-s3/sha256/f2/f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20251101%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20251101T004017Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=b71e743d8249630c2fc3507323d1881ea72fc5b52268910f630be2dcd4719566®ion=us-east-1&namespace=tigera&repo_name=operator&akamai_signature=exp=1761958517~hmac=fbb0495df88e983cfe0aaadb925a78c72b5b7016ae992398194c975ae69d754b\\\": dial tcp: lookup cdn01.quay.io: no such host\"" pod="tigera-operator/tigera-operator-7dcd859c48-fxjmv" podUID="46175887-daad-4c40-814b-964edca9b022" Nov 1 00:40:18.295000 audit[2906]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2906 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.295000 audit[2906]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeaae28390 a2=0 a3=7ffeaae2837c items=0 ppid=2828 pid=2906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.295000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:40:18.297000 audit[2907]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2907 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.297000 audit[2907]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc6704bef0 a2=0 a3=7ffc6704bedc items=0 ppid=2828 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.297000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:40:18.298000 audit[2908]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2908 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.298000 audit[2908]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff2abb6f80 a2=0 a3=7fff2abb6f6c items=0 ppid=2828 pid=2908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.298000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:40:18.301000 audit[2909]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2909 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.301000 audit[2909]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff3d7af6e0 a2=0 a3=7fff3d7af6cc items=0 ppid=2828 pid=2909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.301000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:40:18.302000 audit[2910]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2910 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.302000 audit[2910]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe98d90f50 a2=0 a3=7ffe98d90f3c items=0 ppid=2828 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.302000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:40:18.303000 audit[2911]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2911 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.303000 audit[2911]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed143e7f0 a2=0 a3=7ffed143e7dc items=0 ppid=2828 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.303000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:40:18.412000 audit[2912]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2912 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.412000 audit[2912]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe7277a280 a2=0 a3=7ffe7277a26c items=0 ppid=2828 pid=2912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:40:18.419000 audit[2914]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2914 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.419000 audit[2914]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff904c6f30 a2=0 a3=7fff904c6f1c items=0 ppid=2828 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:40:18.425000 audit[2917]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2917 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.425000 audit[2917]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd38857710 a2=0 a3=7ffd388576fc items=0 ppid=2828 pid=2917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.425000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:40:18.427000 audit[2918]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2918 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.427000 audit[2918]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc412ab20 a2=0 a3=7ffdc412ab0c items=0 ppid=2828 pid=2918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.427000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:40:18.430000 audit[2920]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2920 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.430000 audit[2920]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffa78dc110 a2=0 a3=7fffa78dc0fc items=0 ppid=2828 pid=2920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.430000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:40:18.431000 audit[2921]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2921 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.431000 audit[2921]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffdf68ae30 a2=0 a3=7fffdf68ae1c items=0 ppid=2828 pid=2921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.431000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:40:18.435000 audit[2923]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2923 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.435000 audit[2923]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffaa3a47e0 a2=0 a3=7fffaa3a47cc items=0 ppid=2828 pid=2923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:40:18.439000 audit[2926]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2926 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.439000 audit[2926]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd0897b8f0 a2=0 a3=7ffd0897b8dc items=0 ppid=2828 pid=2926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.439000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:40:18.441000 audit[2927]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2927 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.441000 audit[2927]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc35ef7a70 a2=0 a3=7ffc35ef7a5c items=0 ppid=2828 pid=2927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.441000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:40:18.444000 audit[2929]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2929 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.444000 audit[2929]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcf0300e20 a2=0 a3=7ffcf0300e0c items=0 ppid=2828 pid=2929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.444000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:40:18.446000 audit[2930]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2930 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.446000 audit[2930]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe46b974c0 a2=0 a3=7ffe46b974ac items=0 ppid=2828 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:40:18.449000 audit[2932]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2932 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.449000 audit[2932]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff957c9b80 a2=0 a3=7fff957c9b6c items=0 ppid=2828 pid=2932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:40:18.454000 audit[2935]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2935 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.454000 audit[2935]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffdc804d40 a2=0 a3=7fffdc804d2c items=0 ppid=2828 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:40:18.464000 audit[2938]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2938 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.464000 audit[2938]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffcbeb21f0 a2=0 a3=7fffcbeb21dc items=0 ppid=2828 pid=2938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:40:18.465000 audit[2939]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2939 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.465000 audit[2939]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff58499040 a2=0 a3=7fff5849902c items=0 ppid=2828 pid=2939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.465000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:40:18.469000 audit[2941]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2941 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.469000 audit[2941]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffed11e2d50 a2=0 a3=7ffed11e2d3c items=0 ppid=2828 pid=2941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.469000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:40:18.474000 audit[2944]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.474000 audit[2944]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcbca35570 a2=0 a3=7ffcbca3555c items=0 ppid=2828 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.474000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:40:18.476000 audit[2945]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2945 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.476000 audit[2945]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5b2c5d40 a2=0 a3=7ffc5b2c5d2c items=0 ppid=2828 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.476000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:40:18.481000 audit[2947]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2947 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:40:18.481000 audit[2947]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fffd2ee1bc0 a2=0 a3=7fffd2ee1bac items=0 ppid=2828 pid=2947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.481000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:40:18.516000 audit[2953]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:18.516000 audit[2953]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd5d3f41b0 a2=0 a3=7ffd5d3f419c items=0 ppid=2828 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.516000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:18.527000 audit[2953]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:18.527000 audit[2953]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffd5d3f41b0 a2=0 a3=7ffd5d3f419c items=0 ppid=2828 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.527000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:18.529000 audit[2959]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2959 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.529000 audit[2959]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd77031fa0 a2=0 a3=7ffd77031f8c items=0 ppid=2828 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.529000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:40:18.533000 audit[2961]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2961 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.533000 audit[2961]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff7c195420 a2=0 a3=7fff7c19540c items=0 ppid=2828 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.533000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:40:18.538000 audit[2964]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2964 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.538000 audit[2964]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd5c864450 a2=0 a3=7ffd5c86443c items=0 ppid=2828 pid=2964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.538000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:40:18.540000 audit[2965]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2965 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.540000 audit[2965]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa2d7de20 a2=0 a3=7fffa2d7de0c items=0 ppid=2828 pid=2965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.540000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:40:18.544000 audit[2967]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2967 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.544000 audit[2967]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdcd297df0 a2=0 a3=7ffdcd297ddc items=0 ppid=2828 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.544000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:40:18.545000 audit[2968]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2968 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.545000 audit[2968]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5f588f60 a2=0 a3=7ffd5f588f4c items=0 ppid=2828 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.545000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:40:18.549000 audit[2970]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2970 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.549000 audit[2970]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff28fa8030 a2=0 a3=7fff28fa801c items=0 ppid=2828 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.549000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:40:18.554000 audit[2973]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2973 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.554000 audit[2973]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe1b78fda0 a2=0 a3=7ffe1b78fd8c items=0 ppid=2828 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.554000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:40:18.555000 audit[2974]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2974 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.555000 audit[2974]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff080d6d10 a2=0 a3=7fff080d6cfc items=0 ppid=2828 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:40:18.558000 audit[2976]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2976 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.558000 audit[2976]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffda07ae4d0 a2=0 a3=7ffda07ae4bc items=0 ppid=2828 pid=2976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.558000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:40:18.560000 audit[2977]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2977 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.560000 audit[2977]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe10fe4ef0 a2=0 a3=7ffe10fe4edc items=0 ppid=2828 pid=2977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.560000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:40:18.565000 audit[2979]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2979 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.565000 audit[2979]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff3096ff30 a2=0 a3=7fff3096ff1c items=0 ppid=2828 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.565000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:40:18.570000 audit[2982]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2982 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.570000 audit[2982]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf1bce680 a2=0 a3=7ffcf1bce66c items=0 ppid=2828 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.570000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:40:18.576000 audit[2985]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2985 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.576000 audit[2985]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcc494aca0 a2=0 a3=7ffcc494ac8c items=0 ppid=2828 pid=2985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.576000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:40:18.578000 audit[2986]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2986 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.578000 audit[2986]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe6a23c360 a2=0 a3=7ffe6a23c34c items=0 ppid=2828 pid=2986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.578000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:40:18.583000 audit[2988]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2988 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.583000 audit[2988]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc785e33d0 a2=0 a3=7ffc785e33bc items=0 ppid=2828 pid=2988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:40:18.588000 audit[2991]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2991 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.588000 audit[2991]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe182fea20 a2=0 a3=7ffe182fea0c items=0 ppid=2828 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.588000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:40:18.590000 audit[2992]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2992 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.590000 audit[2992]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8b919c50 a2=0 a3=7ffc8b919c3c items=0 ppid=2828 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.590000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:40:18.593000 audit[2994]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2994 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.593000 audit[2994]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc1d96c420 a2=0 a3=7ffc1d96c40c items=0 ppid=2828 pid=2994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.593000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:40:18.595000 audit[2995]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2995 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.595000 audit[2995]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd51ed2c0 a2=0 a3=7ffcd51ed2ac items=0 ppid=2828 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.595000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:40:18.598000 audit[2997]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2997 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.598000 audit[2997]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc2cf73550 a2=0 a3=7ffc2cf7353c items=0 ppid=2828 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.598000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:40:18.602000 audit[3000]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3000 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:40:18.602000 audit[3000]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe6aedea40 a2=0 a3=7ffe6aedea2c items=0 ppid=2828 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.602000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:40:18.606000 audit[3002]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3002 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:40:18.606000 audit[3002]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffda351e4f0 a2=0 a3=7ffda351e4dc items=0 ppid=2828 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.606000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:18.607000 audit[3002]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3002 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:40:18.607000 audit[3002]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffda351e4f0 a2=0 a3=7ffda351e4dc items=0 ppid=2828 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:18.607000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:32.048161 env[1734]: time="2025-11-01T00:40:32.048125567Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:40:33.830512 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1205803031.mount: Deactivated successfully. Nov 1 00:40:34.839925 env[1734]: time="2025-11-01T00:40:34.839870349Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:34.842463 env[1734]: time="2025-11-01T00:40:34.842414939Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:34.844606 env[1734]: time="2025-11-01T00:40:34.844552986Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:34.846433 env[1734]: time="2025-11-01T00:40:34.846374535Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:34.847334 env[1734]: time="2025-11-01T00:40:34.847296201Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\"" Nov 1 00:40:34.859300 env[1734]: time="2025-11-01T00:40:34.859257907Z" level=info msg="CreateContainer within sandbox \"34f2b24f37f5239b54d18671c5af851f9d969a6759017b114df730bae7943755\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:40:34.872772 env[1734]: time="2025-11-01T00:40:34.872732071Z" level=info msg="CreateContainer within sandbox \"34f2b24f37f5239b54d18671c5af851f9d969a6759017b114df730bae7943755\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab\"" Nov 1 00:40:34.876513 env[1734]: time="2025-11-01T00:40:34.876478404Z" level=info msg="StartContainer for \"4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab\"" Nov 1 00:40:34.901573 systemd[1]: Started cri-containerd-4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab.scope. Nov 1 00:40:34.921238 kernel: kauditd_printk_skb: 300 callbacks suppressed Nov 1 00:40:34.921385 kernel: audit: type=1400 audit(1761957634.916:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.932314 kernel: audit: type=1400 audit(1761957634.916:820): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.932467 kernel: audit: type=1400 audit(1761957634.916:821): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.945619 kernel: audit: type=1400 audit(1761957634.916:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.945758 kernel: audit: type=1400 audit(1761957634.916:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.959209 kernel: audit: type=1400 audit(1761957634.916:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.959330 kernel: audit: type=1400 audit(1761957634.916:825): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.964915 kernel: audit: type=1400 audit(1761957634.916:826): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.977451 kernel: audit: type=1400 audit(1761957634.916:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.985334 kernel: audit: type=1400 audit(1761957634.918:828): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.918000 audit: BPF prog-id=123 op=LOAD Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2821 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:34.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464356130653936353439343237343463343838613266336138613964 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2821 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:34.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464356130653936353439343237343463343838613266336138613964 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.922000 audit: BPF prog-id=124 op=LOAD Nov 1 00:40:34.922000 audit[3011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000388a50 items=0 ppid=2821 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:34.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464356130653936353439343237343463343838613266336138613964 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.924000 audit: BPF prog-id=125 op=LOAD Nov 1 00:40:34.924000 audit[3011]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000388a98 items=0 ppid=2821 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:34.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464356130653936353439343237343463343838613266336138613964 Nov 1 00:40:34.947000 audit: BPF prog-id=125 op=UNLOAD Nov 1 00:40:34.947000 audit: BPF prog-id=124 op=UNLOAD Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:34.947000 audit: BPF prog-id=126 op=LOAD Nov 1 00:40:34.947000 audit[3011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000388ea8 items=0 ppid=2821 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:34.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464356130653936353439343237343463343838613266336138613964 Nov 1 00:40:34.996594 env[1734]: time="2025-11-01T00:40:34.994988662Z" level=info msg="StartContainer for \"4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab\" returns successfully" Nov 1 00:40:35.203314 kubelet[2612]: I1101 00:40:35.203152 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-fxjmv" podStartSLOduration=1.162017597 podStartE2EDuration="19.203130606s" podCreationTimestamp="2025-11-01 00:40:16 +0000 UTC" firstStartedPulling="2025-11-01 00:40:16.811132788 +0000 UTC m=+5.989836424" lastFinishedPulling="2025-11-01 00:40:34.852245797 +0000 UTC m=+24.030949433" observedRunningTime="2025-11-01 00:40:35.201432896 +0000 UTC m=+24.380136552" watchObservedRunningTime="2025-11-01 00:40:35.203130606 +0000 UTC m=+24.381834265" Nov 1 00:40:42.036760 sudo[2004]: pam_unix(sudo:session): session closed for user root Nov 1 00:40:42.049219 kernel: kauditd_printk_skb: 47 callbacks suppressed Nov 1 00:40:42.049368 kernel: audit: type=1106 audit(1761957642.035:837): pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:40:42.035000 audit[2004]: USER_END pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:40:42.035000 audit[2004]: CRED_DISP pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:40:42.061071 kernel: audit: type=1104 audit(1761957642.035:838): pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:40:42.085340 sshd[2001]: pam_unix(sshd:session): session closed for user core Nov 1 00:40:42.103102 kernel: audit: type=1106 audit(1761957642.088:839): pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:40:42.088000 audit[2001]: USER_END pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:40:42.102774 systemd[1]: sshd@6-172.31.20.5:22-147.75.109.163:38994.service: Deactivated successfully. Nov 1 00:40:42.103775 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:40:42.103962 systemd[1]: session-7.scope: Consumed 4.706s CPU time. Nov 1 00:40:42.105374 systemd-logind[1723]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:40:42.107502 systemd-logind[1723]: Removed session 7. Nov 1 00:40:42.088000 audit[2001]: CRED_DISP pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:40:42.117074 kernel: audit: type=1104 audit(1761957642.088:840): pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:40:42.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.5:22-147.75.109.163:38994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:40:42.131104 kernel: audit: type=1131 audit(1761957642.101:841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.5:22-147.75.109.163:38994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:40:42.764000 audit[3087]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:42.773086 kernel: audit: type=1325 audit(1761957642.764:842): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:42.764000 audit[3087]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc5af26fd0 a2=0 a3=7ffc5af26fbc items=0 ppid=2828 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:42.786078 kernel: audit: type=1300 audit(1761957642.764:842): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc5af26fd0 a2=0 a3=7ffc5af26fbc items=0 ppid=2828 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:42.764000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:42.786000 audit[3087]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:42.801453 kernel: audit: type=1327 audit(1761957642.764:842): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:42.801597 kernel: audit: type=1325 audit(1761957642.786:843): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:42.786000 audit[3087]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc5af26fd0 a2=0 a3=0 items=0 ppid=2828 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:42.816085 kernel: audit: type=1300 audit(1761957642.786:843): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc5af26fd0 a2=0 a3=0 items=0 ppid=2828 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:42.786000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:42.834000 audit[3089]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:42.834000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff1fc97840 a2=0 a3=7fff1fc9782c items=0 ppid=2828 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:42.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:42.842000 audit[3089]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:42.842000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff1fc97840 a2=0 a3=0 items=0 ppid=2828 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:42.842000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:46.765000 audit[3092]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3092 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:46.765000 audit[3092]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffcf92808e0 a2=0 a3=7ffcf92808cc items=0 ppid=2828 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:46.765000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:46.773000 audit[3092]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3092 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:46.773000 audit[3092]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcf92808e0 a2=0 a3=0 items=0 ppid=2828 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:46.773000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:46.811000 audit[3094]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3094 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:46.811000 audit[3094]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffdba8fbb00 a2=0 a3=7ffdba8fbaec items=0 ppid=2828 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:46.811000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:46.816000 audit[3094]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3094 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:46.816000 audit[3094]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdba8fbb00 a2=0 a3=0 items=0 ppid=2828 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:46.816000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:47.876135 kernel: kauditd_printk_skb: 19 callbacks suppressed Nov 1 00:40:47.876304 kernel: audit: type=1325 audit(1761957647.866:850): table=filter:97 family=2 entries=19 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:47.866000 audit[3096]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:47.866000 audit[3096]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffffad7cf00 a2=0 a3=7ffffad7ceec items=0 ppid=2828 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:47.893082 kernel: audit: type=1300 audit(1761957647.866:850): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffffad7cf00 a2=0 a3=7ffffad7ceec items=0 ppid=2828 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:47.866000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:47.893000 audit[3096]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:47.906171 kernel: audit: type=1327 audit(1761957647.866:850): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:47.906326 kernel: audit: type=1325 audit(1761957647.893:851): table=nat:98 family=2 entries=12 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:47.893000 audit[3096]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffffad7cf00 a2=0 a3=0 items=0 ppid=2828 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:47.916972 kernel: audit: type=1300 audit(1761957647.893:851): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffffad7cf00 a2=0 a3=0 items=0 ppid=2828 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:47.893000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:47.925077 kernel: audit: type=1327 audit(1761957647.893:851): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:49.073000 audit[3100]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:49.091581 kernel: audit: type=1325 audit(1761957649.073:852): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:49.091739 kernel: audit: type=1300 audit(1761957649.073:852): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffc43b17330 a2=0 a3=7ffc43b1731c items=0 ppid=2828 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.073000 audit[3100]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffc43b17330 a2=0 a3=7ffc43b1731c items=0 ppid=2828 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.073000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:49.099080 kernel: audit: type=1327 audit(1761957649.073:852): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:49.096000 audit[3100]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:49.096000 audit[3100]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc43b17330 a2=0 a3=0 items=0 ppid=2828 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:49.106070 kernel: audit: type=1325 audit(1761957649.096:853): table=nat:100 family=2 entries=12 op=nft_register_rule pid=3100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:49.144470 systemd[1]: Created slice kubepods-besteffort-pod1e104d2e_205f_4d27_bbbd_73eb496e930b.slice. Nov 1 00:40:49.181370 kubelet[2612]: I1101 00:40:49.181338 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/1e104d2e-205f-4d27-bbbd-73eb496e930b-typha-certs\") pod \"calico-typha-6d59f485c9-85wsx\" (UID: \"1e104d2e-205f-4d27-bbbd-73eb496e930b\") " pod="calico-system/calico-typha-6d59f485c9-85wsx" Nov 1 00:40:49.181859 kubelet[2612]: I1101 00:40:49.181839 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1e104d2e-205f-4d27-bbbd-73eb496e930b-tigera-ca-bundle\") pod \"calico-typha-6d59f485c9-85wsx\" (UID: \"1e104d2e-205f-4d27-bbbd-73eb496e930b\") " pod="calico-system/calico-typha-6d59f485c9-85wsx" Nov 1 00:40:49.181950 kubelet[2612]: I1101 00:40:49.181940 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pnjpq\" (UniqueName: \"kubernetes.io/projected/1e104d2e-205f-4d27-bbbd-73eb496e930b-kube-api-access-pnjpq\") pod \"calico-typha-6d59f485c9-85wsx\" (UID: \"1e104d2e-205f-4d27-bbbd-73eb496e930b\") " pod="calico-system/calico-typha-6d59f485c9-85wsx" Nov 1 00:40:49.249664 systemd[1]: Created slice kubepods-besteffort-pode421e0e9_800e_41a0_a5ef_46d7427294ce.slice. Nov 1 00:40:49.283161 kubelet[2612]: I1101 00:40:49.283110 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-cni-net-dir\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.283391 kubelet[2612]: I1101 00:40:49.283371 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/e421e0e9-800e-41a0-a5ef-46d7427294ce-node-certs\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.283748 kubelet[2612]: I1101 00:40:49.283718 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e421e0e9-800e-41a0-a5ef-46d7427294ce-tigera-ca-bundle\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.283915 kubelet[2612]: I1101 00:40:49.283760 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-var-lib-calico\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.283915 kubelet[2612]: I1101 00:40:49.283809 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-cni-log-dir\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.283915 kubelet[2612]: I1101 00:40:49.283849 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-flexvol-driver-host\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.283915 kubelet[2612]: I1101 00:40:49.283875 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-lib-modules\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.283915 kubelet[2612]: I1101 00:40:49.283900 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-policysync\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.284157 kubelet[2612]: I1101 00:40:49.283941 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-cni-bin-dir\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.284157 kubelet[2612]: I1101 00:40:49.283968 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-xtables-lock\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.284157 kubelet[2612]: I1101 00:40:49.284005 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5f8q2\" (UniqueName: \"kubernetes.io/projected/e421e0e9-800e-41a0-a5ef-46d7427294ce-kube-api-access-5f8q2\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.284157 kubelet[2612]: I1101 00:40:49.284045 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/e421e0e9-800e-41a0-a5ef-46d7427294ce-var-run-calico\") pod \"calico-node-g7wsx\" (UID: \"e421e0e9-800e-41a0-a5ef-46d7427294ce\") " pod="calico-system/calico-node-g7wsx" Nov 1 00:40:49.400589 kubelet[2612]: E1101 00:40:49.400552 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.400736 kubelet[2612]: W1101 00:40:49.400591 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.403083 kubelet[2612]: E1101 00:40:49.403029 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.414580 kubelet[2612]: E1101 00:40:49.414546 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.414580 kubelet[2612]: W1101 00:40:49.414574 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.414761 kubelet[2612]: E1101 00:40:49.414602 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.423692 kubelet[2612]: E1101 00:40:49.423652 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:40:49.448560 env[1734]: time="2025-11-01T00:40:49.448481896Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6d59f485c9-85wsx,Uid:1e104d2e-205f-4d27-bbbd-73eb496e930b,Namespace:calico-system,Attempt:0,}" Nov 1 00:40:49.466827 kubelet[2612]: E1101 00:40:49.466789 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.466827 kubelet[2612]: W1101 00:40:49.466818 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.467165 kubelet[2612]: E1101 00:40:49.466846 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.467165 kubelet[2612]: E1101 00:40:49.467138 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.467165 kubelet[2612]: W1101 00:40:49.467151 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.467324 kubelet[2612]: E1101 00:40:49.467168 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.467395 kubelet[2612]: E1101 00:40:49.467372 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.467395 kubelet[2612]: W1101 00:40:49.467386 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.467626 kubelet[2612]: E1101 00:40:49.467399 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.467700 kubelet[2612]: E1101 00:40:49.467683 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.467781 kubelet[2612]: W1101 00:40:49.467702 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.467781 kubelet[2612]: E1101 00:40:49.467719 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.467980 kubelet[2612]: E1101 00:40:49.467940 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.467980 kubelet[2612]: W1101 00:40:49.467956 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.467980 kubelet[2612]: E1101 00:40:49.467972 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.468198 kubelet[2612]: E1101 00:40:49.468183 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.468198 kubelet[2612]: W1101 00:40:49.468197 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.468334 kubelet[2612]: E1101 00:40:49.468212 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.468431 kubelet[2612]: E1101 00:40:49.468410 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.468431 kubelet[2612]: W1101 00:40:49.468425 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.468563 kubelet[2612]: E1101 00:40:49.468438 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.468656 kubelet[2612]: E1101 00:40:49.468635 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.468656 kubelet[2612]: W1101 00:40:49.468651 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.468795 kubelet[2612]: E1101 00:40:49.468665 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.468892 kubelet[2612]: E1101 00:40:49.468872 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.468892 kubelet[2612]: W1101 00:40:49.468886 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.469026 kubelet[2612]: E1101 00:40:49.468899 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.469117 kubelet[2612]: E1101 00:40:49.469103 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.469117 kubelet[2612]: W1101 00:40:49.469115 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.469245 kubelet[2612]: E1101 00:40:49.469128 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.469346 kubelet[2612]: E1101 00:40:49.469325 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.469346 kubelet[2612]: W1101 00:40:49.469340 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.469474 kubelet[2612]: E1101 00:40:49.469352 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.469570 kubelet[2612]: E1101 00:40:49.469550 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.469570 kubelet[2612]: W1101 00:40:49.469565 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.469708 kubelet[2612]: E1101 00:40:49.469577 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.469793 kubelet[2612]: E1101 00:40:49.469779 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.469862 kubelet[2612]: W1101 00:40:49.469794 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.469862 kubelet[2612]: E1101 00:40:49.469805 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.470095 kubelet[2612]: E1101 00:40:49.469989 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.470095 kubelet[2612]: W1101 00:40:49.470000 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.470095 kubelet[2612]: E1101 00:40:49.470012 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.474419 kubelet[2612]: E1101 00:40:49.474373 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.474419 kubelet[2612]: W1101 00:40:49.474408 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.474625 kubelet[2612]: E1101 00:40:49.474436 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.474804 kubelet[2612]: E1101 00:40:49.474784 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.474804 kubelet[2612]: W1101 00:40:49.474803 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.474941 kubelet[2612]: E1101 00:40:49.474823 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.475129 kubelet[2612]: E1101 00:40:49.475110 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.475129 kubelet[2612]: W1101 00:40:49.475128 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.475278 kubelet[2612]: E1101 00:40:49.475151 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.475394 kubelet[2612]: E1101 00:40:49.475375 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.475572 kubelet[2612]: W1101 00:40:49.475397 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.475572 kubelet[2612]: E1101 00:40:49.475411 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.475670 kubelet[2612]: E1101 00:40:49.475644 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.475670 kubelet[2612]: W1101 00:40:49.475665 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.475758 kubelet[2612]: E1101 00:40:49.475680 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.475920 kubelet[2612]: E1101 00:40:49.475904 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.475983 kubelet[2612]: W1101 00:40:49.475929 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.475983 kubelet[2612]: E1101 00:40:49.475943 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.482695 env[1734]: time="2025-11-01T00:40:49.482605189Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:40:49.482845 env[1734]: time="2025-11-01T00:40:49.482742538Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:40:49.482845 env[1734]: time="2025-11-01T00:40:49.482796207Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:40:49.483074 env[1734]: time="2025-11-01T00:40:49.483019626Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/da5975dc5de1af5d07cad6feacf148313ed6a362c720cc79d564c4529711b90b pid=3134 runtime=io.containerd.runc.v2 Nov 1 00:40:49.485463 kubelet[2612]: E1101 00:40:49.485427 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.485463 kubelet[2612]: W1101 00:40:49.485464 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.485653 kubelet[2612]: E1101 00:40:49.485489 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.485653 kubelet[2612]: I1101 00:40:49.485525 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xg94p\" (UniqueName: \"kubernetes.io/projected/249cc7c4-c107-468b-9f47-3a65adfb9b30-kube-api-access-xg94p\") pod \"csi-node-driver-5wbbl\" (UID: \"249cc7c4-c107-468b-9f47-3a65adfb9b30\") " pod="calico-system/csi-node-driver-5wbbl" Nov 1 00:40:49.485849 kubelet[2612]: E1101 00:40:49.485827 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.485918 kubelet[2612]: W1101 00:40:49.485850 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.485918 kubelet[2612]: E1101 00:40:49.485870 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.485918 kubelet[2612]: I1101 00:40:49.485896 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/249cc7c4-c107-468b-9f47-3a65adfb9b30-varrun\") pod \"csi-node-driver-5wbbl\" (UID: \"249cc7c4-c107-468b-9f47-3a65adfb9b30\") " pod="calico-system/csi-node-driver-5wbbl" Nov 1 00:40:49.486245 kubelet[2612]: E1101 00:40:49.486226 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.486324 kubelet[2612]: W1101 00:40:49.486245 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.486324 kubelet[2612]: E1101 00:40:49.486264 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.486324 kubelet[2612]: I1101 00:40:49.486287 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/249cc7c4-c107-468b-9f47-3a65adfb9b30-kubelet-dir\") pod \"csi-node-driver-5wbbl\" (UID: \"249cc7c4-c107-468b-9f47-3a65adfb9b30\") " pod="calico-system/csi-node-driver-5wbbl" Nov 1 00:40:49.486553 kubelet[2612]: E1101 00:40:49.486536 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.486616 kubelet[2612]: W1101 00:40:49.486554 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.486616 kubelet[2612]: E1101 00:40:49.486572 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.486616 kubelet[2612]: I1101 00:40:49.486599 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/249cc7c4-c107-468b-9f47-3a65adfb9b30-socket-dir\") pod \"csi-node-driver-5wbbl\" (UID: \"249cc7c4-c107-468b-9f47-3a65adfb9b30\") " pod="calico-system/csi-node-driver-5wbbl" Nov 1 00:40:49.486877 kubelet[2612]: E1101 00:40:49.486859 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.486944 kubelet[2612]: W1101 00:40:49.486877 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.486944 kubelet[2612]: E1101 00:40:49.486896 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.486944 kubelet[2612]: I1101 00:40:49.486918 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/249cc7c4-c107-468b-9f47-3a65adfb9b30-registration-dir\") pod \"csi-node-driver-5wbbl\" (UID: \"249cc7c4-c107-468b-9f47-3a65adfb9b30\") " pod="calico-system/csi-node-driver-5wbbl" Nov 1 00:40:49.488071 kubelet[2612]: E1101 00:40:49.487220 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.488071 kubelet[2612]: W1101 00:40:49.487235 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.488071 kubelet[2612]: E1101 00:40:49.487330 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.488071 kubelet[2612]: E1101 00:40:49.487497 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.488071 kubelet[2612]: W1101 00:40:49.487508 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.488071 kubelet[2612]: E1101 00:40:49.487609 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.488071 kubelet[2612]: E1101 00:40:49.487744 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.488071 kubelet[2612]: W1101 00:40:49.487753 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.488071 kubelet[2612]: E1101 00:40:49.487836 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.488071 kubelet[2612]: E1101 00:40:49.488005 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.488071 kubelet[2612]: W1101 00:40:49.488014 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.488071 kubelet[2612]: E1101 00:40:49.488078 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.488713 kubelet[2612]: E1101 00:40:49.488308 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.488713 kubelet[2612]: W1101 00:40:49.488319 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.488713 kubelet[2612]: E1101 00:40:49.488404 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.488713 kubelet[2612]: E1101 00:40:49.488550 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.488713 kubelet[2612]: W1101 00:40:49.488559 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.488713 kubelet[2612]: E1101 00:40:49.488571 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.488998 kubelet[2612]: E1101 00:40:49.488783 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.488998 kubelet[2612]: W1101 00:40:49.488793 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.488998 kubelet[2612]: E1101 00:40:49.488806 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.489170 kubelet[2612]: E1101 00:40:49.489007 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.489170 kubelet[2612]: W1101 00:40:49.489016 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.489170 kubelet[2612]: E1101 00:40:49.489028 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.489316 kubelet[2612]: E1101 00:40:49.489275 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.489316 kubelet[2612]: W1101 00:40:49.489285 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.489316 kubelet[2612]: E1101 00:40:49.489297 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.491121 kubelet[2612]: E1101 00:40:49.489493 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.491121 kubelet[2612]: W1101 00:40:49.489504 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.491121 kubelet[2612]: E1101 00:40:49.489517 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.509688 systemd[1]: Started cri-containerd-da5975dc5de1af5d07cad6feacf148313ed6a362c720cc79d564c4529711b90b.scope. Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.540000 audit: BPF prog-id=127 op=LOAD Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3134 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461353937356463356465316166356430376361643666656163663134 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3134 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461353937356463356465316166356430376361643666656163663134 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit: BPF prog-id=128 op=LOAD Nov 1 00:40:49.541000 audit[3161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003d4540 items=0 ppid=3134 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461353937356463356465316166356430376361643666656163663134 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit: BPF prog-id=129 op=LOAD Nov 1 00:40:49.541000 audit[3161]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003d4588 items=0 ppid=3134 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461353937356463356465316166356430376361643666656163663134 Nov 1 00:40:49.541000 audit: BPF prog-id=129 op=UNLOAD Nov 1 00:40:49.541000 audit: BPF prog-id=128 op=UNLOAD Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { perfmon } for pid=3161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit[3161]: AVC avc: denied { bpf } for pid=3161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.541000 audit: BPF prog-id=130 op=LOAD Nov 1 00:40:49.541000 audit[3161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d4998 items=0 ppid=3134 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461353937356463356465316166356430376361643666656163663134 Nov 1 00:40:49.553117 env[1734]: time="2025-11-01T00:40:49.553042561Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-g7wsx,Uid:e421e0e9-800e-41a0-a5ef-46d7427294ce,Namespace:calico-system,Attempt:0,}" Nov 1 00:40:49.576461 env[1734]: time="2025-11-01T00:40:49.576351150Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:40:49.576461 env[1734]: time="2025-11-01T00:40:49.576408106Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:40:49.576461 env[1734]: time="2025-11-01T00:40:49.576425416Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:40:49.578169 env[1734]: time="2025-11-01T00:40:49.577095137Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e pid=3184 runtime=io.containerd.runc.v2 Nov 1 00:40:49.588663 kubelet[2612]: E1101 00:40:49.588436 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.588663 kubelet[2612]: W1101 00:40:49.588463 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.588663 kubelet[2612]: E1101 00:40:49.588493 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.589195 kubelet[2612]: E1101 00:40:49.588993 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.589195 kubelet[2612]: W1101 00:40:49.589009 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.589195 kubelet[2612]: E1101 00:40:49.589027 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.590434 kubelet[2612]: E1101 00:40:49.589496 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.590434 kubelet[2612]: W1101 00:40:49.589511 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.590434 kubelet[2612]: E1101 00:40:49.589527 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.590434 kubelet[2612]: E1101 00:40:49.589802 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.590434 kubelet[2612]: W1101 00:40:49.589829 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.590434 kubelet[2612]: E1101 00:40:49.589844 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.590434 kubelet[2612]: E1101 00:40:49.590144 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.590434 kubelet[2612]: W1101 00:40:49.590155 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.590434 kubelet[2612]: E1101 00:40:49.590170 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.590434 kubelet[2612]: E1101 00:40:49.590435 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.591005 kubelet[2612]: W1101 00:40:49.590455 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.591005 kubelet[2612]: E1101 00:40:49.590469 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.591005 kubelet[2612]: E1101 00:40:49.590683 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.591005 kubelet[2612]: W1101 00:40:49.590701 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.591005 kubelet[2612]: E1101 00:40:49.590715 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.591005 kubelet[2612]: E1101 00:40:49.590910 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.591005 kubelet[2612]: W1101 00:40:49.590919 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.591005 kubelet[2612]: E1101 00:40:49.590940 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.591480 kubelet[2612]: E1101 00:40:49.591279 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.591480 kubelet[2612]: W1101 00:40:49.591290 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.591480 kubelet[2612]: E1101 00:40:49.591304 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.591792 kubelet[2612]: E1101 00:40:49.591766 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.591792 kubelet[2612]: W1101 00:40:49.591791 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.591976 kubelet[2612]: E1101 00:40:49.591938 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.592041 kubelet[2612]: E1101 00:40:49.592018 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.592041 kubelet[2612]: W1101 00:40:49.592037 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.592213 kubelet[2612]: E1101 00:40:49.592187 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.592350 kubelet[2612]: E1101 00:40:49.592337 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.592415 kubelet[2612]: W1101 00:40:49.592352 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.592415 kubelet[2612]: E1101 00:40:49.592481 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.592644 kubelet[2612]: E1101 00:40:49.592605 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.592644 kubelet[2612]: W1101 00:40:49.592626 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.592745 kubelet[2612]: E1101 00:40:49.592646 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.592904 kubelet[2612]: E1101 00:40:49.592890 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.592974 kubelet[2612]: W1101 00:40:49.592905 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.592974 kubelet[2612]: E1101 00:40:49.592922 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.593216 kubelet[2612]: E1101 00:40:49.593199 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.593282 kubelet[2612]: W1101 00:40:49.593235 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.593674 kubelet[2612]: E1101 00:40:49.593370 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.593674 kubelet[2612]: E1101 00:40:49.593510 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.593674 kubelet[2612]: W1101 00:40:49.593521 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.593674 kubelet[2612]: E1101 00:40:49.593583 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.594097 kubelet[2612]: E1101 00:40:49.594071 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.594173 kubelet[2612]: W1101 00:40:49.594101 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.594292 kubelet[2612]: E1101 00:40:49.594263 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.594348 kubelet[2612]: E1101 00:40:49.594339 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.594392 kubelet[2612]: W1101 00:40:49.594349 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.594481 kubelet[2612]: E1101 00:40:49.594457 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.594650 kubelet[2612]: E1101 00:40:49.594593 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.594650 kubelet[2612]: W1101 00:40:49.594605 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.594650 kubelet[2612]: E1101 00:40:49.594644 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.594881 kubelet[2612]: E1101 00:40:49.594859 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.594881 kubelet[2612]: W1101 00:40:49.594876 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.594978 kubelet[2612]: E1101 00:40:49.594893 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.595819 kubelet[2612]: E1101 00:40:49.595800 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.595819 kubelet[2612]: W1101 00:40:49.595815 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.595960 kubelet[2612]: E1101 00:40:49.595834 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.596167 kubelet[2612]: E1101 00:40:49.596108 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.596167 kubelet[2612]: W1101 00:40:49.596121 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.596167 kubelet[2612]: E1101 00:40:49.596139 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.596435 kubelet[2612]: E1101 00:40:49.596418 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.596435 kubelet[2612]: W1101 00:40:49.596433 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.596773 kubelet[2612]: E1101 00:40:49.596561 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.598495 kubelet[2612]: E1101 00:40:49.597790 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.598495 kubelet[2612]: W1101 00:40:49.597807 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.598495 kubelet[2612]: E1101 00:40:49.597822 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.598495 kubelet[2612]: E1101 00:40:49.598115 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.598495 kubelet[2612]: W1101 00:40:49.598127 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.598495 kubelet[2612]: E1101 00:40:49.598141 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.605924 systemd[1]: Started cri-containerd-340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e.scope. Nov 1 00:40:49.614859 kubelet[2612]: E1101 00:40:49.614831 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:49.614859 kubelet[2612]: W1101 00:40:49.614856 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:49.615074 kubelet[2612]: E1101 00:40:49.614880 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:49.621684 env[1734]: time="2025-11-01T00:40:49.621625220Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6d59f485c9-85wsx,Uid:1e104d2e-205f-4d27-bbbd-73eb496e930b,Namespace:calico-system,Attempt:0,} returns sandbox id \"da5975dc5de1af5d07cad6feacf148313ed6a362c720cc79d564c4529711b90b\"" Nov 1 00:40:49.626077 env[1734]: time="2025-11-01T00:40:49.626001165Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.639000 audit: BPF prog-id=131 op=LOAD Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3184 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334306238333837383364663538376633663262313031383362656235 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3184 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334306238333837383364663538376633663262313031383362656235 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.640000 audit: BPF prog-id=132 op=LOAD Nov 1 00:40:49.640000 audit[3196]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00025bcd0 items=0 ppid=3184 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334306238333837383364663538376633663262313031383362656235 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.641000 audit: BPF prog-id=133 op=LOAD Nov 1 00:40:49.641000 audit[3196]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00025bd18 items=0 ppid=3184 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334306238333837383364663538376633663262313031383362656235 Nov 1 00:40:49.642000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:40:49.642000 audit: BPF prog-id=132 op=UNLOAD Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { perfmon } for pid=3196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit[3196]: AVC avc: denied { bpf } for pid=3196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:49.642000 audit: BPF prog-id=134 op=LOAD Nov 1 00:40:49.642000 audit[3196]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000346128 items=0 ppid=3184 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:49.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334306238333837383364663538376633663262313031383362656235 Nov 1 00:40:49.658982 env[1734]: time="2025-11-01T00:40:49.658881549Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-g7wsx,Uid:e421e0e9-800e-41a0-a5ef-46d7427294ce,Namespace:calico-system,Attempt:0,} returns sandbox id \"340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e\"" Nov 1 00:40:50.123000 audit[3255]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=3255 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:50.123000 audit[3255]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffc52386c10 a2=0 a3=7ffc52386bfc items=0 ppid=2828 pid=3255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:50.123000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:50.131000 audit[3255]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=3255 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:50.131000 audit[3255]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc52386c10 a2=0 a3=0 items=0 ppid=2828 pid=3255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:50.131000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:50.773587 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3053115686.mount: Deactivated successfully. Nov 1 00:40:51.049692 kubelet[2612]: E1101 00:40:51.049549 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:40:51.896960 env[1734]: time="2025-11-01T00:40:51.896891582Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:51.903492 env[1734]: time="2025-11-01T00:40:51.903450413Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:51.905505 env[1734]: time="2025-11-01T00:40:51.905466893Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:51.906947 env[1734]: time="2025-11-01T00:40:51.906912348Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:51.907723 env[1734]: time="2025-11-01T00:40:51.907525849Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958\"" Nov 1 00:40:51.911875 env[1734]: time="2025-11-01T00:40:51.911843318Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:40:51.930909 env[1734]: time="2025-11-01T00:40:51.930862886Z" level=info msg="CreateContainer within sandbox \"da5975dc5de1af5d07cad6feacf148313ed6a362c720cc79d564c4529711b90b\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:40:51.944820 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1316602971.mount: Deactivated successfully. Nov 1 00:40:51.951364 env[1734]: time="2025-11-01T00:40:51.951290153Z" level=info msg="CreateContainer within sandbox \"da5975dc5de1af5d07cad6feacf148313ed6a362c720cc79d564c4529711b90b\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"8087da3db56bc657d6a6ac04714feb5e58494870bcae05c3985d798277216a10\"" Nov 1 00:40:51.954965 env[1734]: time="2025-11-01T00:40:51.954773918Z" level=info msg="StartContainer for \"8087da3db56bc657d6a6ac04714feb5e58494870bcae05c3985d798277216a10\"" Nov 1 00:40:51.980933 systemd[1]: Started cri-containerd-8087da3db56bc657d6a6ac04714feb5e58494870bcae05c3985d798277216a10.scope. Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit: BPF prog-id=135 op=LOAD Nov 1 00:40:52.001000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.001000 audit[3266]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3134 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:52.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383764613364623536626336353764366136616330343731346665 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3134 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:52.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383764613364623536626336353764366136616330343731346665 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit: BPF prog-id=136 op=LOAD Nov 1 00:40:52.002000 audit[3266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000247b0 items=0 ppid=3134 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:52.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383764613364623536626336353764366136616330343731346665 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit: BPF prog-id=137 op=LOAD Nov 1 00:40:52.002000 audit[3266]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000247f8 items=0 ppid=3134 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:52.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383764613364623536626336353764366136616330343731346665 Nov 1 00:40:52.002000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:40:52.002000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { perfmon } for pid=3266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit[3266]: AVC avc: denied { bpf } for pid=3266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:52.002000 audit: BPF prog-id=138 op=LOAD Nov 1 00:40:52.002000 audit[3266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024c08 items=0 ppid=3134 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:52.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383764613364623536626336353764366136616330343731346665 Nov 1 00:40:52.040089 env[1734]: time="2025-11-01T00:40:52.037860615Z" level=info msg="StartContainer for \"8087da3db56bc657d6a6ac04714feb5e58494870bcae05c3985d798277216a10\" returns successfully" Nov 1 00:40:52.205132 kubelet[2612]: E1101 00:40:52.205013 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.205132 kubelet[2612]: W1101 00:40:52.205043 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.205132 kubelet[2612]: E1101 00:40:52.205092 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.205774 kubelet[2612]: E1101 00:40:52.205421 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.205774 kubelet[2612]: W1101 00:40:52.205435 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.205774 kubelet[2612]: E1101 00:40:52.205470 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.205774 kubelet[2612]: E1101 00:40:52.205723 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.205774 kubelet[2612]: W1101 00:40:52.205736 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.205774 kubelet[2612]: E1101 00:40:52.205750 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.209028 kubelet[2612]: E1101 00:40:52.208993 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.209028 kubelet[2612]: W1101 00:40:52.209022 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.209320 kubelet[2612]: E1101 00:40:52.209046 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.209391 kubelet[2612]: E1101 00:40:52.209362 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.209391 kubelet[2612]: W1101 00:40:52.209374 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.209501 kubelet[2612]: E1101 00:40:52.209390 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.209632 kubelet[2612]: E1101 00:40:52.209610 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.209710 kubelet[2612]: W1101 00:40:52.209634 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.209710 kubelet[2612]: E1101 00:40:52.209647 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.209877 kubelet[2612]: E1101 00:40:52.209863 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.209964 kubelet[2612]: W1101 00:40:52.209886 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.209964 kubelet[2612]: E1101 00:40:52.209900 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.210184 kubelet[2612]: E1101 00:40:52.210168 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.210184 kubelet[2612]: W1101 00:40:52.210183 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.210294 kubelet[2612]: E1101 00:40:52.210197 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.210456 kubelet[2612]: E1101 00:40:52.210437 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.210546 kubelet[2612]: W1101 00:40:52.210461 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.210546 kubelet[2612]: E1101 00:40:52.210475 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.210707 kubelet[2612]: E1101 00:40:52.210692 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.210854 kubelet[2612]: W1101 00:40:52.210716 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.210854 kubelet[2612]: E1101 00:40:52.210729 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.210960 kubelet[2612]: E1101 00:40:52.210954 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.211009 kubelet[2612]: W1101 00:40:52.210963 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.211009 kubelet[2612]: E1101 00:40:52.210987 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.211311 kubelet[2612]: E1101 00:40:52.211293 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.211311 kubelet[2612]: W1101 00:40:52.211310 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.211475 kubelet[2612]: E1101 00:40:52.211325 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.211616 kubelet[2612]: E1101 00:40:52.211601 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.211616 kubelet[2612]: W1101 00:40:52.211616 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.211728 kubelet[2612]: E1101 00:40:52.211629 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.211872 kubelet[2612]: E1101 00:40:52.211854 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.211945 kubelet[2612]: W1101 00:40:52.211877 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.211945 kubelet[2612]: E1101 00:40:52.211890 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.212219 kubelet[2612]: E1101 00:40:52.212202 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.212297 kubelet[2612]: W1101 00:40:52.212219 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.212297 kubelet[2612]: E1101 00:40:52.212234 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.217385 kubelet[2612]: E1101 00:40:52.217344 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.217385 kubelet[2612]: W1101 00:40:52.217374 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.217685 kubelet[2612]: E1101 00:40:52.217397 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.217745 kubelet[2612]: E1101 00:40:52.217729 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.217745 kubelet[2612]: W1101 00:40:52.217741 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.217834 kubelet[2612]: E1101 00:40:52.217760 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.218127 kubelet[2612]: E1101 00:40:52.218099 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.218127 kubelet[2612]: W1101 00:40:52.218117 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.218307 kubelet[2612]: E1101 00:40:52.218136 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.218409 kubelet[2612]: E1101 00:40:52.218393 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.218525 kubelet[2612]: W1101 00:40:52.218409 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.218525 kubelet[2612]: E1101 00:40:52.218426 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.218776 kubelet[2612]: E1101 00:40:52.218655 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.218776 kubelet[2612]: W1101 00:40:52.218666 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.218776 kubelet[2612]: E1101 00:40:52.218682 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.218949 kubelet[2612]: E1101 00:40:52.218908 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.218949 kubelet[2612]: W1101 00:40:52.218918 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.219043 kubelet[2612]: E1101 00:40:52.219009 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.219183 kubelet[2612]: E1101 00:40:52.219168 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.219183 kubelet[2612]: W1101 00:40:52.219183 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.219348 kubelet[2612]: E1101 00:40:52.219272 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.219429 kubelet[2612]: E1101 00:40:52.219412 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.219516 kubelet[2612]: W1101 00:40:52.219429 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.219592 kubelet[2612]: E1101 00:40:52.219545 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.219715 kubelet[2612]: E1101 00:40:52.219701 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.219797 kubelet[2612]: W1101 00:40:52.219715 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.219797 kubelet[2612]: E1101 00:40:52.219733 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.222324 kubelet[2612]: E1101 00:40:52.222291 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.222324 kubelet[2612]: W1101 00:40:52.222315 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.222577 kubelet[2612]: E1101 00:40:52.222442 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.222662 kubelet[2612]: E1101 00:40:52.222616 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.222662 kubelet[2612]: W1101 00:40:52.222627 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.222824 kubelet[2612]: E1101 00:40:52.222723 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.222898 kubelet[2612]: E1101 00:40:52.222861 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.222898 kubelet[2612]: W1101 00:40:52.222871 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.222898 kubelet[2612]: E1101 00:40:52.222887 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.223181 kubelet[2612]: E1101 00:40:52.223163 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.223181 kubelet[2612]: W1101 00:40:52.223175 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.223312 kubelet[2612]: E1101 00:40:52.223197 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.223483 kubelet[2612]: E1101 00:40:52.223464 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.223483 kubelet[2612]: W1101 00:40:52.223479 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.223684 kubelet[2612]: E1101 00:40:52.223496 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.224179 kubelet[2612]: E1101 00:40:52.224156 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.224179 kubelet[2612]: W1101 00:40:52.224174 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.224330 kubelet[2612]: E1101 00:40:52.224264 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.224431 kubelet[2612]: E1101 00:40:52.224415 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.224498 kubelet[2612]: W1101 00:40:52.224432 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.224498 kubelet[2612]: E1101 00:40:52.224446 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.224700 kubelet[2612]: E1101 00:40:52.224685 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.224700 kubelet[2612]: W1101 00:40:52.224698 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.224821 kubelet[2612]: E1101 00:40:52.224713 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:52.225112 kubelet[2612]: E1101 00:40:52.225096 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:52.225112 kubelet[2612]: W1101 00:40:52.225112 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:52.225226 kubelet[2612]: E1101 00:40:52.225125 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.047977 kubelet[2612]: E1101 00:40:53.047216 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:40:53.204926 env[1734]: time="2025-11-01T00:40:53.204861761Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:53.209092 env[1734]: time="2025-11-01T00:40:53.209015209Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:53.211518 env[1734]: time="2025-11-01T00:40:53.211473105Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:53.213912 env[1734]: time="2025-11-01T00:40:53.213867131Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:40:53.214468 env[1734]: time="2025-11-01T00:40:53.214432097Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5\"" Nov 1 00:40:53.219962 kubelet[2612]: E1101 00:40:53.219588 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.219962 kubelet[2612]: W1101 00:40:53.219804 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.219962 kubelet[2612]: E1101 00:40:53.219828 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.220585 kubelet[2612]: E1101 00:40:53.220550 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.220585 kubelet[2612]: W1101 00:40:53.220568 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.220766 kubelet[2612]: E1101 00:40:53.220587 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.220875 kubelet[2612]: E1101 00:40:53.220854 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.220962 kubelet[2612]: W1101 00:40:53.220875 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.220962 kubelet[2612]: E1101 00:40:53.220891 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.227076 kubelet[2612]: I1101 00:40:53.223852 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6d59f485c9-85wsx" podStartSLOduration=1.935693578 podStartE2EDuration="4.22383275s" podCreationTimestamp="2025-11-01 00:40:49 +0000 UTC" firstStartedPulling="2025-11-01 00:40:49.623119911 +0000 UTC m=+38.801823564" lastFinishedPulling="2025-11-01 00:40:51.9112591 +0000 UTC m=+41.089962736" observedRunningTime="2025-11-01 00:40:52.238033999 +0000 UTC m=+41.416737657" watchObservedRunningTime="2025-11-01 00:40:53.22383275 +0000 UTC m=+42.402536436" Nov 1 00:40:53.227679 kubelet[2612]: E1101 00:40:53.227426 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.227679 kubelet[2612]: W1101 00:40:53.227451 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.227679 kubelet[2612]: E1101 00:40:53.227488 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.228278 env[1734]: time="2025-11-01T00:40:53.228214883Z" level=info msg="CreateContainer within sandbox \"340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:40:53.228402 kubelet[2612]: E1101 00:40:53.228320 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.228402 kubelet[2612]: W1101 00:40:53.228335 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.228402 kubelet[2612]: E1101 00:40:53.228354 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.228609 kubelet[2612]: E1101 00:40:53.228594 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.228681 kubelet[2612]: W1101 00:40:53.228611 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.228681 kubelet[2612]: E1101 00:40:53.228627 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.228839 kubelet[2612]: E1101 00:40:53.228826 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.228910 kubelet[2612]: W1101 00:40:53.228841 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.228910 kubelet[2612]: E1101 00:40:53.228853 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.229077 kubelet[2612]: E1101 00:40:53.229063 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.229146 kubelet[2612]: W1101 00:40:53.229078 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.229146 kubelet[2612]: E1101 00:40:53.229091 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.229340 kubelet[2612]: E1101 00:40:53.229325 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.229431 kubelet[2612]: W1101 00:40:53.229341 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.229431 kubelet[2612]: E1101 00:40:53.229354 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.229567 kubelet[2612]: E1101 00:40:53.229549 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.229622 kubelet[2612]: W1101 00:40:53.229571 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.229622 kubelet[2612]: E1101 00:40:53.229583 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.229789 kubelet[2612]: E1101 00:40:53.229775 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.229862 kubelet[2612]: W1101 00:40:53.229791 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.229862 kubelet[2612]: E1101 00:40:53.229805 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.230013 kubelet[2612]: E1101 00:40:53.229999 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.230086 kubelet[2612]: W1101 00:40:53.230015 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.230086 kubelet[2612]: E1101 00:40:53.230028 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.232483 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.232507 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.232525 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.232743 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.232755 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.232768 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.232965 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.232974 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.232986 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.233413 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.233426 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.233440 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.233727 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.233738 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.233756 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.234022 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.234034 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.234086 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.234346 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.234356 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.234373 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.234603 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.234614 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.234630 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.234865 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.235247 kubelet[2612]: W1101 00:40:53.234875 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.235247 kubelet[2612]: E1101 00:40:53.234959 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.239952 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.242221 kubelet[2612]: W1101 00:40:53.240000 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.240091 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.240556 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.242221 kubelet[2612]: W1101 00:40:53.240577 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.240719 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.240988 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.242221 kubelet[2612]: W1101 00:40:53.241000 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.241097 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.241687 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.242221 kubelet[2612]: W1101 00:40:53.241698 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.241717 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.242221 kubelet[2612]: E1101 00:40:53.241940 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.242221 kubelet[2612]: W1101 00:40:53.241951 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.242040 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.244344 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.245549 kubelet[2612]: W1101 00:40:53.244360 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.244469 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.244613 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.245549 kubelet[2612]: W1101 00:40:53.244622 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.244748 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.244914 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.245549 kubelet[2612]: W1101 00:40:53.244924 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.244941 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.245447 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.245549 kubelet[2612]: W1101 00:40:53.245458 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.245549 kubelet[2612]: E1101 00:40:53.245475 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.246310 kubelet[2612]: E1101 00:40:53.245690 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.246310 kubelet[2612]: W1101 00:40:53.245699 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.246310 kubelet[2612]: E1101 00:40:53.245712 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.246310 kubelet[2612]: E1101 00:40:53.245935 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.246310 kubelet[2612]: W1101 00:40:53.245944 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.246310 kubelet[2612]: E1101 00:40:53.245959 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.246562 kubelet[2612]: E1101 00:40:53.246356 2612 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:40:53.246562 kubelet[2612]: W1101 00:40:53.246366 2612 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:40:53.246562 kubelet[2612]: E1101 00:40:53.246380 2612 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:40:53.266601 kernel: kauditd_printk_skb: 179 callbacks suppressed Nov 1 00:40:53.266742 kernel: audit: type=1325 audit(1761957653.257:910): table=filter:103 family=2 entries=21 op=nft_register_rule pid=3367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:53.257000 audit[3367]: NETFILTER_CFG table=filter:103 family=2 entries=21 op=nft_register_rule pid=3367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:53.257000 audit[3367]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff845def90 a2=0 a3=7fff845def7c items=0 ppid=2828 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.278004 env[1734]: time="2025-11-01T00:40:53.270470429Z" level=info msg="CreateContainer within sandbox \"340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"5ffb20e7897a77cf9f31f6845ce94fa0ef9897d9aa37dd81eaf49d5a87d1cb05\"" Nov 1 00:40:53.278004 env[1734]: time="2025-11-01T00:40:53.271339431Z" level=info msg="StartContainer for \"5ffb20e7897a77cf9f31f6845ce94fa0ef9897d9aa37dd81eaf49d5a87d1cb05\"" Nov 1 00:40:53.278176 kernel: audit: type=1300 audit(1761957653.257:910): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff845def90 a2=0 a3=7fff845def7c items=0 ppid=2828 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.257000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:53.295512 kernel: audit: type=1327 audit(1761957653.257:910): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:53.295655 kernel: audit: type=1325 audit(1761957653.279:911): table=nat:104 family=2 entries=19 op=nft_register_chain pid=3367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:53.295691 kernel: audit: type=1300 audit(1761957653.279:911): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff845def90 a2=0 a3=7fff845def7c items=0 ppid=2828 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.279000 audit[3367]: NETFILTER_CFG table=nat:104 family=2 entries=19 op=nft_register_chain pid=3367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:40:53.279000 audit[3367]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff845def90 a2=0 a3=7fff845def7c items=0 ppid=2828 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.279000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:53.313151 kernel: audit: type=1327 audit(1761957653.279:911): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:40:53.333933 systemd[1]: Started cri-containerd-5ffb20e7897a77cf9f31f6845ce94fa0ef9897d9aa37dd81eaf49d5a87d1cb05.scope. Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.364141 kernel: audit: type=1400 audit(1761957653.355:912): avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f40a43a4cc8 items=0 ppid=3184 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.375072 kernel: audit: type=1300 audit(1761957653.355:912): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f40a43a4cc8 items=0 ppid=3184 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566666232306537383937613737636639663331663638343563653934 Nov 1 00:40:53.387129 kernel: audit: type=1327 audit(1761957653.355:912): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566666232306537383937613737636639663331663638343563653934 Nov 1 00:40:53.387279 kernel: audit: type=1400 audit(1761957653.355:913): avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit: BPF prog-id=139 op=LOAD Nov 1 00:40:53.355000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000304ab8 items=0 ppid=3184 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566666232306537383937613737636639663331663638343563653934 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.355000 audit: BPF prog-id=140 op=LOAD Nov 1 00:40:53.355000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000304b08 items=0 ppid=3184 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566666232306537383937613737636639663331663638343563653934 Nov 1 00:40:53.356000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:40:53.356000 audit: BPF prog-id=139 op=UNLOAD Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { perfmon } for pid=3374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit[3374]: AVC avc: denied { bpf } for pid=3374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:40:53.356000 audit: BPF prog-id=141 op=LOAD Nov 1 00:40:53.356000 audit[3374]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000304b98 items=0 ppid=3184 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:40:53.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566666232306537383937613737636639663331663638343563653934 Nov 1 00:40:53.415357 env[1734]: time="2025-11-01T00:40:53.415242192Z" level=info msg="StartContainer for \"5ffb20e7897a77cf9f31f6845ce94fa0ef9897d9aa37dd81eaf49d5a87d1cb05\" returns successfully" Nov 1 00:40:53.425427 systemd[1]: cri-containerd-5ffb20e7897a77cf9f31f6845ce94fa0ef9897d9aa37dd81eaf49d5a87d1cb05.scope: Deactivated successfully. Nov 1 00:40:53.429000 audit: BPF prog-id=141 op=UNLOAD Nov 1 00:40:53.453178 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5ffb20e7897a77cf9f31f6845ce94fa0ef9897d9aa37dd81eaf49d5a87d1cb05-rootfs.mount: Deactivated successfully. Nov 1 00:40:53.503988 env[1734]: time="2025-11-01T00:40:53.503926734Z" level=info msg="shim disconnected" id=5ffb20e7897a77cf9f31f6845ce94fa0ef9897d9aa37dd81eaf49d5a87d1cb05 Nov 1 00:40:53.503988 env[1734]: time="2025-11-01T00:40:53.503987892Z" level=warning msg="cleaning up after shim disconnected" id=5ffb20e7897a77cf9f31f6845ce94fa0ef9897d9aa37dd81eaf49d5a87d1cb05 namespace=k8s.io Nov 1 00:40:53.504361 env[1734]: time="2025-11-01T00:40:53.504011780Z" level=info msg="cleaning up dead shim" Nov 1 00:40:53.514907 env[1734]: time="2025-11-01T00:40:53.514867032Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:40:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3414 runtime=io.containerd.runc.v2\n" Nov 1 00:40:54.202724 env[1734]: time="2025-11-01T00:40:54.202681239Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:40:55.048734 kubelet[2612]: E1101 00:40:55.047214 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:40:57.054661 kubelet[2612]: E1101 00:40:57.054300 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:40:59.047545 kubelet[2612]: E1101 00:40:59.047497 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:01.048627 kubelet[2612]: E1101 00:41:01.048573 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:02.371713 env[1734]: time="2025-11-01T00:41:02.371658161Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:41:02.374510 env[1734]: time="2025-11-01T00:41:02.374460142Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:41:02.377987 env[1734]: time="2025-11-01T00:41:02.377940229Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:41:02.381714 env[1734]: time="2025-11-01T00:41:02.381672857Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:41:02.383793 env[1734]: time="2025-11-01T00:41:02.383748545Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd\"" Nov 1 00:41:02.390479 env[1734]: time="2025-11-01T00:41:02.390161049Z" level=info msg="CreateContainer within sandbox \"340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:41:02.467697 env[1734]: time="2025-11-01T00:41:02.467601950Z" level=info msg="CreateContainer within sandbox \"340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"9c6f146f7534f41129c0bc8c61ec50013d3d6289134940890f7b339df60a545f\"" Nov 1 00:41:02.481611 env[1734]: time="2025-11-01T00:41:02.472268452Z" level=info msg="StartContainer for \"9c6f146f7534f41129c0bc8c61ec50013d3d6289134940890f7b339df60a545f\"" Nov 1 00:41:02.619899 systemd[1]: Started cri-containerd-9c6f146f7534f41129c0bc8c61ec50013d3d6289134940890f7b339df60a545f.scope. Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.681601 kernel: kauditd_printk_skb: 40 callbacks suppressed Nov 1 00:41:02.681768 kernel: audit: type=1400 audit(1761957662.674:919): avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f63e72ca738 items=0 ppid=3184 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:02.737335 kernel: audit: type=1300 audit(1761957662.674:919): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f63e72ca738 items=0 ppid=3184 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:02.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366631343666373533346634313132396330626338633631656335 Nov 1 00:41:02.754084 kernel: audit: type=1327 audit(1761957662.674:919): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366631343666373533346634313132396330626338633631656335 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.793234 kernel: audit: type=1400 audit(1761957662.674:920): avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.812456 kernel: audit: type=1400 audit(1761957662.674:920): avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.862554 kernel: audit: type=1400 audit(1761957662.674:920): avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.862736 kernel: audit: type=1400 audit(1761957662.674:920): avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.884088 env[1734]: time="2025-11-01T00:41:02.881679371Z" level=info msg="StartContainer for \"9c6f146f7534f41129c0bc8c61ec50013d3d6289134940890f7b339df60a545f\" returns successfully" Nov 1 00:41:02.909096 kernel: audit: type=1400 audit(1761957662.674:920): avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.982478 kernel: audit: type=1400 audit(1761957662.674:920): avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.983333 kernel: audit: type=1400 audit(1761957662.674:920): avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.674000 audit: BPF prog-id=142 op=LOAD Nov 1 00:41:02.674000 audit[3440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c00032fbd8 items=0 ppid=3184 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:02.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366631343666373533346634313132396330626338633631656335 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.708000 audit: BPF prog-id=143 op=LOAD Nov 1 00:41:02.708000 audit[3440]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c00032fc28 items=0 ppid=3184 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:02.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366631343666373533346634313132396330626338633631656335 Nov 1 00:41:02.712000 audit: BPF prog-id=143 op=UNLOAD Nov 1 00:41:02.712000 audit: BPF prog-id=142 op=UNLOAD Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:02.712000 audit: BPF prog-id=144 op=LOAD Nov 1 00:41:02.712000 audit[3440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c00032fcb8 items=0 ppid=3184 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:02.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963366631343666373533346634313132396330626338633631656335 Nov 1 00:41:03.050253 kubelet[2612]: E1101 00:41:03.050211 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:05.042273 systemd[1]: cri-containerd-9c6f146f7534f41129c0bc8c61ec50013d3d6289134940890f7b339df60a545f.scope: Deactivated successfully. Nov 1 00:41:05.045000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:41:05.050093 kubelet[2612]: E1101 00:41:05.049614 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:05.073384 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9c6f146f7534f41129c0bc8c61ec50013d3d6289134940890f7b339df60a545f-rootfs.mount: Deactivated successfully. Nov 1 00:41:05.085606 env[1734]: time="2025-11-01T00:41:05.085556209Z" level=info msg="shim disconnected" id=9c6f146f7534f41129c0bc8c61ec50013d3d6289134940890f7b339df60a545f Nov 1 00:41:05.086138 env[1734]: time="2025-11-01T00:41:05.086090542Z" level=warning msg="cleaning up after shim disconnected" id=9c6f146f7534f41129c0bc8c61ec50013d3d6289134940890f7b339df60a545f namespace=k8s.io Nov 1 00:41:05.086138 env[1734]: time="2025-11-01T00:41:05.086116903Z" level=info msg="cleaning up dead shim" Nov 1 00:41:05.095756 env[1734]: time="2025-11-01T00:41:05.095697911Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:41:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3480 runtime=io.containerd.runc.v2\n" Nov 1 00:41:05.137955 kubelet[2612]: I1101 00:41:05.133477 2612 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:41:05.262767 env[1734]: time="2025-11-01T00:41:05.262731786Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:41:05.305910 kubelet[2612]: I1101 00:41:05.305782 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/9e74237e-e6c1-475d-a5d0-2b21bced39ac-goldmane-key-pair\") pod \"goldmane-666569f655-vv82h\" (UID: \"9e74237e-e6c1-475d-a5d0-2b21bced39ac\") " pod="calico-system/goldmane-666569f655-vv82h" Nov 1 00:41:05.305910 kubelet[2612]: I1101 00:41:05.305834 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c310f163-2203-4d17-8fa6-ed4211a3c699-calico-apiserver-certs\") pod \"calico-apiserver-694c7bcdf8-w5cjp\" (UID: \"c310f163-2203-4d17-8fa6-ed4211a3c699\") " pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" Nov 1 00:41:05.305910 kubelet[2612]: I1101 00:41:05.305860 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/40f020e9-694f-467c-8633-16e91962974a-calico-apiserver-certs\") pod \"calico-apiserver-694c7bcdf8-kntch\" (UID: \"40f020e9-694f-467c-8633-16e91962974a\") " pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" Nov 1 00:41:05.307109 kubelet[2612]: I1101 00:41:05.305888 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/66ef8aaa-4cbe-4280-98d5-566c4289d009-tigera-ca-bundle\") pod \"calico-kube-controllers-7669f6697f-ds4tg\" (UID: \"66ef8aaa-4cbe-4280-98d5-566c4289d009\") " pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" Nov 1 00:41:05.307109 kubelet[2612]: I1101 00:41:05.306852 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l6p6w\" (UniqueName: \"kubernetes.io/projected/66ef8aaa-4cbe-4280-98d5-566c4289d009-kube-api-access-l6p6w\") pod \"calico-kube-controllers-7669f6697f-ds4tg\" (UID: \"66ef8aaa-4cbe-4280-98d5-566c4289d009\") " pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" Nov 1 00:41:05.307109 kubelet[2612]: I1101 00:41:05.306887 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9e74237e-e6c1-475d-a5d0-2b21bced39ac-goldmane-ca-bundle\") pod \"goldmane-666569f655-vv82h\" (UID: \"9e74237e-e6c1-475d-a5d0-2b21bced39ac\") " pod="calico-system/goldmane-666569f655-vv82h" Nov 1 00:41:05.307109 kubelet[2612]: I1101 00:41:05.306911 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f789da1f-d0a3-42cc-ae39-26e3b499bb59-whisker-ca-bundle\") pod \"whisker-5495bf9c66-t8qbt\" (UID: \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\") " pod="calico-system/whisker-5495bf9c66-t8qbt" Nov 1 00:41:05.307109 kubelet[2612]: I1101 00:41:05.306962 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7d27004b-6f0c-4540-b573-3c4c5a8ee5bb-config-volume\") pod \"coredns-668d6bf9bc-s5tsw\" (UID: \"7d27004b-6f0c-4540-b573-3c4c5a8ee5bb\") " pod="kube-system/coredns-668d6bf9bc-s5tsw" Nov 1 00:41:05.307109 kubelet[2612]: I1101 00:41:05.306988 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vdxpj\" (UniqueName: \"kubernetes.io/projected/f789da1f-d0a3-42cc-ae39-26e3b499bb59-kube-api-access-vdxpj\") pod \"whisker-5495bf9c66-t8qbt\" (UID: \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\") " pod="calico-system/whisker-5495bf9c66-t8qbt" Nov 1 00:41:05.307109 kubelet[2612]: I1101 00:41:05.307014 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-frcq9\" (UniqueName: \"kubernetes.io/projected/40f020e9-694f-467c-8633-16e91962974a-kube-api-access-frcq9\") pod \"calico-apiserver-694c7bcdf8-kntch\" (UID: \"40f020e9-694f-467c-8633-16e91962974a\") " pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" Nov 1 00:41:05.307630 kubelet[2612]: I1101 00:41:05.307041 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f789da1f-d0a3-42cc-ae39-26e3b499bb59-whisker-backend-key-pair\") pod \"whisker-5495bf9c66-t8qbt\" (UID: \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\") " pod="calico-system/whisker-5495bf9c66-t8qbt" Nov 1 00:41:05.308535 kubelet[2612]: I1101 00:41:05.308512 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xtpbb\" (UniqueName: \"kubernetes.io/projected/9e74237e-e6c1-475d-a5d0-2b21bced39ac-kube-api-access-xtpbb\") pod \"goldmane-666569f655-vv82h\" (UID: \"9e74237e-e6c1-475d-a5d0-2b21bced39ac\") " pod="calico-system/goldmane-666569f655-vv82h" Nov 1 00:41:05.308654 kubelet[2612]: I1101 00:41:05.308639 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s6lt8\" (UniqueName: \"kubernetes.io/projected/c310f163-2203-4d17-8fa6-ed4211a3c699-kube-api-access-s6lt8\") pod \"calico-apiserver-694c7bcdf8-w5cjp\" (UID: \"c310f163-2203-4d17-8fa6-ed4211a3c699\") " pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" Nov 1 00:41:05.308751 kubelet[2612]: I1101 00:41:05.308737 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ld8hs\" (UniqueName: \"kubernetes.io/projected/7d27004b-6f0c-4540-b573-3c4c5a8ee5bb-kube-api-access-ld8hs\") pod \"coredns-668d6bf9bc-s5tsw\" (UID: \"7d27004b-6f0c-4540-b573-3c4c5a8ee5bb\") " pod="kube-system/coredns-668d6bf9bc-s5tsw" Nov 1 00:41:05.308876 kubelet[2612]: I1101 00:41:05.308861 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/9e74237e-e6c1-475d-a5d0-2b21bced39ac-config\") pod \"goldmane-666569f655-vv82h\" (UID: \"9e74237e-e6c1-475d-a5d0-2b21bced39ac\") " pod="calico-system/goldmane-666569f655-vv82h" Nov 1 00:41:05.308970 kubelet[2612]: I1101 00:41:05.308957 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2-config-volume\") pod \"coredns-668d6bf9bc-qbfmr\" (UID: \"6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2\") " pod="kube-system/coredns-668d6bf9bc-qbfmr" Nov 1 00:41:05.309086 kubelet[2612]: I1101 00:41:05.309070 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f6hzc\" (UniqueName: \"kubernetes.io/projected/6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2-kube-api-access-f6hzc\") pod \"coredns-668d6bf9bc-qbfmr\" (UID: \"6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2\") " pod="kube-system/coredns-668d6bf9bc-qbfmr" Nov 1 00:41:05.321894 systemd[1]: Created slice kubepods-besteffort-podf789da1f_d0a3_42cc_ae39_26e3b499bb59.slice. Nov 1 00:41:05.322764 systemd[1]: Created slice kubepods-burstable-pod7d27004b_6f0c_4540_b573_3c4c5a8ee5bb.slice. Nov 1 00:41:05.332966 systemd[1]: Created slice kubepods-besteffort-podc310f163_2203_4d17_8fa6_ed4211a3c699.slice. Nov 1 00:41:05.346012 systemd[1]: Created slice kubepods-besteffort-pod66ef8aaa_4cbe_4280_98d5_566c4289d009.slice. Nov 1 00:41:05.357550 systemd[1]: Created slice kubepods-burstable-pod6ee6b90c_f131_4fdb_a0e3_3b9d79b680a2.slice. Nov 1 00:41:05.367377 systemd[1]: Created slice kubepods-besteffort-pod40f020e9_694f_467c_8633_16e91962974a.slice. Nov 1 00:41:05.376815 systemd[1]: Created slice kubepods-besteffort-pod9e74237e_e6c1_475d_a5d0_2b21bced39ac.slice. Nov 1 00:41:05.482000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:05.483000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:05.483000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014654e0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:05.483000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:05.482000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0029ee930 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:05.482000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:05.627805 env[1734]: time="2025-11-01T00:41:05.627765704Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-s5tsw,Uid:7d27004b-6f0c-4540-b573-3c4c5a8ee5bb,Namespace:kube-system,Attempt:0,}" Nov 1 00:41:05.632781 env[1734]: time="2025-11-01T00:41:05.632410861Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5495bf9c66-t8qbt,Uid:f789da1f-d0a3-42cc-ae39-26e3b499bb59,Namespace:calico-system,Attempt:0,}" Nov 1 00:41:05.643026 env[1734]: time="2025-11-01T00:41:05.642976259Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694c7bcdf8-w5cjp,Uid:c310f163-2203-4d17-8fa6-ed4211a3c699,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:41:05.652591 env[1734]: time="2025-11-01T00:41:05.652538477Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7669f6697f-ds4tg,Uid:66ef8aaa-4cbe-4280-98d5-566c4289d009,Namespace:calico-system,Attempt:0,}" Nov 1 00:41:05.666365 env[1734]: time="2025-11-01T00:41:05.666306018Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-qbfmr,Uid:6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2,Namespace:kube-system,Attempt:0,}" Nov 1 00:41:05.678441 env[1734]: time="2025-11-01T00:41:05.678382905Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694c7bcdf8-kntch,Uid:40f020e9-694f-467c-8633-16e91962974a,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:41:05.681357 env[1734]: time="2025-11-01T00:41:05.681319580Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-vv82h,Uid:9e74237e-e6c1-475d-a5d0-2b21bced39ac,Namespace:calico-system,Attempt:0,}" Nov 1 00:41:06.480000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=524564 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:06.480000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c009d96de0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:41:06.480000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:41:06.505000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:06.505000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00a3f4f00 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:41:06.505000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:41:06.505000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:06.505000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c005be8000 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:41:06.505000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:41:06.516000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=524570 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:06.516000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c009d96e40 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:41:06.516000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:41:06.538000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:06.538000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c005be8420 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:41:06.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:41:06.538000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:06.538000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00a3f4f60 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:41:06.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:41:07.054291 systemd[1]: Created slice kubepods-besteffort-pod249cc7c4_c107_468b_9f47_3a65adfb9b30.slice. Nov 1 00:41:07.058513 env[1734]: time="2025-11-01T00:41:07.058468763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5wbbl,Uid:249cc7c4-c107-468b-9f47-3a65adfb9b30,Namespace:calico-system,Attempt:0,}" Nov 1 00:41:08.502380 env[1734]: time="2025-11-01T00:41:08.502301350Z" level=error msg="Failed to destroy network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.506380 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7-shm.mount: Deactivated successfully. Nov 1 00:41:08.509087 env[1734]: time="2025-11-01T00:41:08.508994044Z" level=error msg="encountered an error cleaning up failed sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.509384 env[1734]: time="2025-11-01T00:41:08.509340352Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7669f6697f-ds4tg,Uid:66ef8aaa-4cbe-4280-98d5-566c4289d009,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.513365 kubelet[2612]: E1101 00:41:08.513305 2612 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.516074 kubelet[2612]: E1101 00:41:08.516000 2612 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" Nov 1 00:41:08.517450 kubelet[2612]: E1101 00:41:08.517399 2612 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" Nov 1 00:41:08.517595 kubelet[2612]: E1101 00:41:08.517509 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7669f6697f-ds4tg_calico-system(66ef8aaa-4cbe-4280-98d5-566c4289d009)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7669f6697f-ds4tg_calico-system(66ef8aaa-4cbe-4280-98d5-566c4289d009)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:41:08.520893 env[1734]: time="2025-11-01T00:41:08.520834943Z" level=error msg="Failed to destroy network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.524585 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56-shm.mount: Deactivated successfully. Nov 1 00:41:08.528549 env[1734]: time="2025-11-01T00:41:08.528480480Z" level=error msg="encountered an error cleaning up failed sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.528813 env[1734]: time="2025-11-01T00:41:08.528758014Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-s5tsw,Uid:7d27004b-6f0c-4540-b573-3c4c5a8ee5bb,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.529510 kubelet[2612]: E1101 00:41:08.529206 2612 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.529510 kubelet[2612]: E1101 00:41:08.529280 2612 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-s5tsw" Nov 1 00:41:08.529510 kubelet[2612]: E1101 00:41:08.529308 2612 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-s5tsw" Nov 1 00:41:08.529510 kubelet[2612]: E1101 00:41:08.529364 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-s5tsw_kube-system(7d27004b-6f0c-4540-b573-3c4c5a8ee5bb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-s5tsw_kube-system(7d27004b-6f0c-4540-b573-3c4c5a8ee5bb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-s5tsw" podUID="7d27004b-6f0c-4540-b573-3c4c5a8ee5bb" Nov 1 00:41:08.550685 env[1734]: time="2025-11-01T00:41:08.550625152Z" level=error msg="Failed to destroy network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.554297 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe-shm.mount: Deactivated successfully. Nov 1 00:41:08.560382 env[1734]: time="2025-11-01T00:41:08.560313174Z" level=error msg="encountered an error cleaning up failed sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.561855 env[1734]: time="2025-11-01T00:41:08.560611390Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-vv82h,Uid:9e74237e-e6c1-475d-a5d0-2b21bced39ac,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.562143 kubelet[2612]: E1101 00:41:08.560876 2612 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.562143 kubelet[2612]: E1101 00:41:08.560995 2612 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-vv82h" Nov 1 00:41:08.562143 kubelet[2612]: E1101 00:41:08.561041 2612 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-vv82h" Nov 1 00:41:08.562143 kubelet[2612]: E1101 00:41:08.561128 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-vv82h_calico-system(9e74237e-e6c1-475d-a5d0-2b21bced39ac)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-vv82h_calico-system(9e74237e-e6c1-475d-a5d0-2b21bced39ac)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:41:08.575278 env[1734]: time="2025-11-01T00:41:08.575131606Z" level=error msg="Failed to destroy network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.581919 env[1734]: time="2025-11-01T00:41:08.579160586Z" level=error msg="encountered an error cleaning up failed sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.581919 env[1734]: time="2025-11-01T00:41:08.579259624Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5wbbl,Uid:249cc7c4-c107-468b-9f47-3a65adfb9b30,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.582736 kubelet[2612]: E1101 00:41:08.579554 2612 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.582736 kubelet[2612]: E1101 00:41:08.579642 2612 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5wbbl" Nov 1 00:41:08.582736 kubelet[2612]: E1101 00:41:08.579679 2612 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5wbbl" Nov 1 00:41:08.582736 kubelet[2612]: E1101 00:41:08.580421 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:08.578740 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf-shm.mount: Deactivated successfully. Nov 1 00:41:08.585026 env[1734]: time="2025-11-01T00:41:08.584966987Z" level=error msg="Failed to destroy network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.590815 env[1734]: time="2025-11-01T00:41:08.588787070Z" level=error msg="encountered an error cleaning up failed sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.590815 env[1734]: time="2025-11-01T00:41:08.588874590Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-qbfmr,Uid:6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.588954 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4-shm.mount: Deactivated successfully. Nov 1 00:41:08.593356 kubelet[2612]: E1101 00:41:08.591202 2612 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.593356 kubelet[2612]: E1101 00:41:08.591268 2612 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-qbfmr" Nov 1 00:41:08.593356 kubelet[2612]: E1101 00:41:08.591297 2612 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-qbfmr" Nov 1 00:41:08.593356 kubelet[2612]: E1101 00:41:08.591343 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-qbfmr_kube-system(6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-qbfmr_kube-system(6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-qbfmr" podUID="6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2" Nov 1 00:41:08.596387 env[1734]: time="2025-11-01T00:41:08.596330394Z" level=error msg="Failed to destroy network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.596964 env[1734]: time="2025-11-01T00:41:08.596919698Z" level=error msg="encountered an error cleaning up failed sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.597153 env[1734]: time="2025-11-01T00:41:08.597118758Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5495bf9c66-t8qbt,Uid:f789da1f-d0a3-42cc-ae39-26e3b499bb59,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.599455 kubelet[2612]: E1101 00:41:08.597490 2612 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.599455 kubelet[2612]: E1101 00:41:08.597566 2612 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5495bf9c66-t8qbt" Nov 1 00:41:08.599455 kubelet[2612]: E1101 00:41:08.597607 2612 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5495bf9c66-t8qbt" Nov 1 00:41:08.599455 kubelet[2612]: E1101 00:41:08.597656 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5495bf9c66-t8qbt_calico-system(f789da1f-d0a3-42cc-ae39-26e3b499bb59)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5495bf9c66-t8qbt_calico-system(f789da1f-d0a3-42cc-ae39-26e3b499bb59)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5495bf9c66-t8qbt" podUID="f789da1f-d0a3-42cc-ae39-26e3b499bb59" Nov 1 00:41:08.627742 env[1734]: time="2025-11-01T00:41:08.627677726Z" level=error msg="Failed to destroy network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.628184 env[1734]: time="2025-11-01T00:41:08.628128383Z" level=error msg="encountered an error cleaning up failed sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.628281 env[1734]: time="2025-11-01T00:41:08.628217589Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694c7bcdf8-w5cjp,Uid:c310f163-2203-4d17-8fa6-ed4211a3c699,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.628844 kubelet[2612]: E1101 00:41:08.628597 2612 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.628844 kubelet[2612]: E1101 00:41:08.628677 2612 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" Nov 1 00:41:08.628844 kubelet[2612]: E1101 00:41:08.628706 2612 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" Nov 1 00:41:08.628844 kubelet[2612]: E1101 00:41:08.628779 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-694c7bcdf8-w5cjp_calico-apiserver(c310f163-2203-4d17-8fa6-ed4211a3c699)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-694c7bcdf8-w5cjp_calico-apiserver(c310f163-2203-4d17-8fa6-ed4211a3c699)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:41:08.637690 env[1734]: time="2025-11-01T00:41:08.637623611Z" level=error msg="Failed to destroy network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.638327 env[1734]: time="2025-11-01T00:41:08.638244854Z" level=error msg="encountered an error cleaning up failed sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.638526 env[1734]: time="2025-11-01T00:41:08.638489285Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694c7bcdf8-kntch,Uid:40f020e9-694f-467c-8633-16e91962974a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.639264 kubelet[2612]: E1101 00:41:08.638888 2612 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:08.639264 kubelet[2612]: E1101 00:41:08.639019 2612 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" Nov 1 00:41:08.639264 kubelet[2612]: E1101 00:41:08.639047 2612 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" Nov 1 00:41:08.639264 kubelet[2612]: E1101 00:41:08.639185 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-694c7bcdf8-kntch_calico-apiserver(40f020e9-694f-467c-8633-16e91962974a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-694c7bcdf8-kntch_calico-apiserver(40f020e9-694f-467c-8633-16e91962974a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:41:09.322088 kubelet[2612]: I1101 00:41:09.320038 2612 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:41:09.322272 kubelet[2612]: I1101 00:41:09.322114 2612 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:41:09.322272 kubelet[2612]: I1101 00:41:09.322131 2612 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:41:09.324206 kubelet[2612]: I1101 00:41:09.324176 2612 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:41:09.326840 kubelet[2612]: I1101 00:41:09.326812 2612 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:41:09.329710 kubelet[2612]: I1101 00:41:09.329682 2612 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:41:09.333501 env[1734]: time="2025-11-01T00:41:09.333436262Z" level=info msg="StopPodSandbox for \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\"" Nov 1 00:41:09.350449 env[1734]: time="2025-11-01T00:41:09.350403795Z" level=info msg="StopPodSandbox for \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\"" Nov 1 00:41:09.355805 env[1734]: time="2025-11-01T00:41:09.350713943Z" level=info msg="StopPodSandbox for \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\"" Nov 1 00:41:09.358226 env[1734]: time="2025-11-01T00:41:09.350880417Z" level=info msg="StopPodSandbox for \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\"" Nov 1 00:41:09.361150 env[1734]: time="2025-11-01T00:41:09.350915730Z" level=info msg="StopPodSandbox for \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\"" Nov 1 00:41:09.364167 env[1734]: time="2025-11-01T00:41:09.351016182Z" level=info msg="StopPodSandbox for \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\"" Nov 1 00:41:09.411975 kubelet[2612]: I1101 00:41:09.411916 2612 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:41:09.425575 env[1734]: time="2025-11-01T00:41:09.425539241Z" level=info msg="StopPodSandbox for \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\"" Nov 1 00:41:09.455645 kubelet[2612]: I1101 00:41:09.455615 2612 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:41:09.457496 env[1734]: time="2025-11-01T00:41:09.457465974Z" level=info msg="StopPodSandbox for \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\"" Nov 1 00:41:09.480327 env[1734]: time="2025-11-01T00:41:09.480275650Z" level=error msg="StopPodSandbox for \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\" failed" error="failed to destroy network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:09.496279 kubelet[2612]: E1101 00:41:09.496202 2612 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:41:09.497093 env[1734]: time="2025-11-01T00:41:09.497023799Z" level=error msg="StopPodSandbox for \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\" failed" error="failed to destroy network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:09.499285 kubelet[2612]: E1101 00:41:09.496313 2612 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf"} Nov 1 00:41:09.500515 kubelet[2612]: E1101 00:41:09.499318 2612 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"249cc7c4-c107-468b-9f47-3a65adfb9b30\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:41:09.500515 kubelet[2612]: E1101 00:41:09.499347 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"249cc7c4-c107-468b-9f47-3a65adfb9b30\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:09.507196 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0-shm.mount: Deactivated successfully. Nov 1 00:41:09.507295 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865-shm.mount: Deactivated successfully. Nov 1 00:41:09.507354 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb-shm.mount: Deactivated successfully. Nov 1 00:41:09.509925 kubelet[2612]: E1101 00:41:09.509742 2612 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:41:09.509925 kubelet[2612]: E1101 00:41:09.509809 2612 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7"} Nov 1 00:41:09.509925 kubelet[2612]: E1101 00:41:09.509842 2612 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"66ef8aaa-4cbe-4280-98d5-566c4289d009\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:41:09.509925 kubelet[2612]: E1101 00:41:09.509883 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"66ef8aaa-4cbe-4280-98d5-566c4289d009\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:41:09.547936 env[1734]: time="2025-11-01T00:41:09.547858182Z" level=error msg="StopPodSandbox for \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\" failed" error="failed to destroy network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:09.549044 kubelet[2612]: E1101 00:41:09.548819 2612 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:41:09.549044 kubelet[2612]: E1101 00:41:09.548893 2612 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56"} Nov 1 00:41:09.549044 kubelet[2612]: E1101 00:41:09.548951 2612 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7d27004b-6f0c-4540-b573-3c4c5a8ee5bb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:41:09.549044 kubelet[2612]: E1101 00:41:09.548984 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7d27004b-6f0c-4540-b573-3c4c5a8ee5bb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-s5tsw" podUID="7d27004b-6f0c-4540-b573-3c4c5a8ee5bb" Nov 1 00:41:09.589789 env[1734]: time="2025-11-01T00:41:09.589719330Z" level=error msg="StopPodSandbox for \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\" failed" error="failed to destroy network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:09.590393 kubelet[2612]: E1101 00:41:09.590127 2612 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:41:09.590393 kubelet[2612]: E1101 00:41:09.590224 2612 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb"} Nov 1 00:41:09.590393 kubelet[2612]: E1101 00:41:09.590279 2612 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:41:09.590393 kubelet[2612]: E1101 00:41:09.590327 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5495bf9c66-t8qbt" podUID="f789da1f-d0a3-42cc-ae39-26e3b499bb59" Nov 1 00:41:09.606933 env[1734]: time="2025-11-01T00:41:09.606869063Z" level=error msg="StopPodSandbox for \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\" failed" error="failed to destroy network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:09.607624 kubelet[2612]: E1101 00:41:09.607399 2612 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:41:09.607624 kubelet[2612]: E1101 00:41:09.607466 2612 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865"} Nov 1 00:41:09.607624 kubelet[2612]: E1101 00:41:09.607531 2612 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c310f163-2203-4d17-8fa6-ed4211a3c699\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:41:09.607624 kubelet[2612]: E1101 00:41:09.607575 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c310f163-2203-4d17-8fa6-ed4211a3c699\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:41:09.645118 env[1734]: time="2025-11-01T00:41:09.645023936Z" level=error msg="StopPodSandbox for \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\" failed" error="failed to destroy network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:09.645854 kubelet[2612]: E1101 00:41:09.645583 2612 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:41:09.645854 kubelet[2612]: E1101 00:41:09.645655 2612 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0"} Nov 1 00:41:09.645854 kubelet[2612]: E1101 00:41:09.645740 2612 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"40f020e9-694f-467c-8633-16e91962974a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:41:09.645854 kubelet[2612]: E1101 00:41:09.645783 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"40f020e9-694f-467c-8633-16e91962974a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:41:09.654075 env[1734]: time="2025-11-01T00:41:09.653994373Z" level=error msg="StopPodSandbox for \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\" failed" error="failed to destroy network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:09.654718 kubelet[2612]: E1101 00:41:09.654502 2612 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:41:09.654718 kubelet[2612]: E1101 00:41:09.654573 2612 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe"} Nov 1 00:41:09.654718 kubelet[2612]: E1101 00:41:09.654631 2612 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9e74237e-e6c1-475d-a5d0-2b21bced39ac\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:41:09.654718 kubelet[2612]: E1101 00:41:09.654662 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9e74237e-e6c1-475d-a5d0-2b21bced39ac\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:41:09.659250 env[1734]: time="2025-11-01T00:41:09.659187088Z" level=error msg="StopPodSandbox for \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\" failed" error="failed to destroy network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:41:09.659904 kubelet[2612]: E1101 00:41:09.659660 2612 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:41:09.659904 kubelet[2612]: E1101 00:41:09.659739 2612 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4"} Nov 1 00:41:09.659904 kubelet[2612]: E1101 00:41:09.659800 2612 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:41:09.659904 kubelet[2612]: E1101 00:41:09.659850 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-qbfmr" podUID="6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2" Nov 1 00:41:11.106301 kernel: kauditd_printk_skb: 58 callbacks suppressed Nov 1 00:41:11.106535 kernel: audit: type=1400 audit(1761957671.093:934): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:11.093000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:11.121987 kernel: audit: type=1300 audit(1761957671.093:934): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001658180 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:11.093000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001658180 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:11.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:11.141919 kernel: audit: type=1327 audit(1761957671.093:934): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:11.093000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:11.154159 kernel: audit: type=1400 audit(1761957671.093:935): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:11.155978 kernel: audit: type=1300 audit(1761957671.093:935): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015d8ee0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:11.093000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015d8ee0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:11.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:11.178125 kernel: audit: type=1327 audit(1761957671.093:935): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:11.106000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:11.190072 kernel: audit: type=1400 audit(1761957671.106:936): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:11.106000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015d8f20 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:11.210114 kernel: audit: type=1300 audit(1761957671.106:936): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015d8f20 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:11.106000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:11.106000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:11.231999 kernel: audit: type=1327 audit(1761957671.106:936): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:11.232150 kernel: audit: type=1400 audit(1761957671.106:937): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:41:11.106000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015d8f60 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:41:11.106000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:41:13.829421 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount8539251.mount: Deactivated successfully. Nov 1 00:41:13.890628 env[1734]: time="2025-11-01T00:41:13.890567158Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:41:13.895158 env[1734]: time="2025-11-01T00:41:13.895108569Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:41:13.898930 env[1734]: time="2025-11-01T00:41:13.898887812Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:41:13.902351 env[1734]: time="2025-11-01T00:41:13.902311079Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:41:13.902775 env[1734]: time="2025-11-01T00:41:13.902745729Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9\"" Nov 1 00:41:13.953287 env[1734]: time="2025-11-01T00:41:13.953242297Z" level=info msg="CreateContainer within sandbox \"340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:41:14.031646 env[1734]: time="2025-11-01T00:41:14.031588502Z" level=info msg="CreateContainer within sandbox \"340b838783df587f3f2b10183beb544e5d47abb0448187f7c9ada5b6f5173d9e\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"1a74e3644ef288f77ef71a21433c64794d9c8ce59d93179ce43cdfd02e91fd32\"" Nov 1 00:41:14.033963 env[1734]: time="2025-11-01T00:41:14.032599835Z" level=info msg="StartContainer for \"1a74e3644ef288f77ef71a21433c64794d9c8ce59d93179ce43cdfd02e91fd32\"" Nov 1 00:41:14.060835 systemd[1]: Started cri-containerd-1a74e3644ef288f77ef71a21433c64794d9c8ce59d93179ce43cdfd02e91fd32.scope. Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f388de432f8 items=0 ppid=3184 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:14.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161373465333634346566323838663737656637316132313433336336 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit: BPF prog-id=145 op=LOAD Nov 1 00:41:14.101000 audit[3861]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000024488 items=0 ppid=3184 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:14.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161373465333634346566323838663737656637316132313433336336 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit: BPF prog-id=146 op=LOAD Nov 1 00:41:14.101000 audit[3861]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0000244d8 items=0 ppid=3184 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:14.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161373465333634346566323838663737656637316132313433336336 Nov 1 00:41:14.101000 audit: BPF prog-id=146 op=UNLOAD Nov 1 00:41:14.101000 audit: BPF prog-id=145 op=UNLOAD Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:14.101000 audit: BPF prog-id=147 op=LOAD Nov 1 00:41:14.101000 audit[3861]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000024568 items=0 ppid=3184 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:14.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161373465333634346566323838663737656637316132313433336336 Nov 1 00:41:14.136994 env[1734]: time="2025-11-01T00:41:14.136928856Z" level=info msg="StartContainer for \"1a74e3644ef288f77ef71a21433c64794d9c8ce59d93179ce43cdfd02e91fd32\" returns successfully" Nov 1 00:41:14.555784 kubelet[2612]: I1101 00:41:14.548686 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-g7wsx" podStartSLOduration=1.294427464 podStartE2EDuration="25.537430468s" podCreationTimestamp="2025-11-01 00:40:49 +0000 UTC" firstStartedPulling="2025-11-01 00:40:49.661123497 +0000 UTC m=+38.839827134" lastFinishedPulling="2025-11-01 00:41:13.904126486 +0000 UTC m=+63.082830138" observedRunningTime="2025-11-01 00:41:14.536460912 +0000 UTC m=+63.715164604" watchObservedRunningTime="2025-11-01 00:41:14.537430468 +0000 UTC m=+63.716134126" Nov 1 00:41:14.579572 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:41:14.579727 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:41:14.886274 env[1734]: time="2025-11-01T00:41:14.886223799Z" level=info msg="StopPodSandbox for \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\"" Nov 1 00:41:15.504583 systemd[1]: run-containerd-runc-k8s.io-1a74e3644ef288f77ef71a21433c64794d9c8ce59d93179ce43cdfd02e91fd32-runc.eEKPiS.mount: Deactivated successfully. Nov 1 00:41:16.353163 kernel: kauditd_printk_skb: 45 callbacks suppressed Nov 1 00:41:16.353323 kernel: audit: type=1400 audit(1761957676.341:944): avc: denied { write } for pid=4045 comm="tee" name="fd" dev="proc" ino=26518 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.353897 kernel: audit: type=1300 audit(1761957676.341:944): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee7f4a7e4 a2=241 a3=1b6 items=1 ppid=3995 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.341000 audit[4045]: AVC avc: denied { write } for pid=4045 comm="tee" name="fd" dev="proc" ino=26518 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.341000 audit[4045]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee7f4a7e4 a2=241 a3=1b6 items=1 ppid=3995 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.341000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:41:16.341000 audit: PATH item=0 name="/dev/fd/63" inode=26510 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.375593 kernel: audit: type=1307 audit(1761957676.341:944): cwd="/etc/service/enabled/bird/log" Nov 1 00:41:16.375718 kernel: audit: type=1302 audit(1761957676.341:944): item=0 name="/dev/fd/63" inode=26510 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.375764 kernel: audit: type=1327 audit(1761957676.341:944): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.341000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.347000 audit[4028]: AVC avc: denied { write } for pid=4028 comm="tee" name="fd" dev="proc" ino=26525 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.390596 kernel: audit: type=1400 audit(1761957676.347:945): avc: denied { write } for pid=4028 comm="tee" name="fd" dev="proc" ino=26525 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.347000 audit[4028]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe3dbd07d3 a2=241 a3=1b6 items=1 ppid=3985 pid=4028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.404079 kernel: audit: type=1300 audit(1761957676.347:945): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe3dbd07d3 a2=241 a3=1b6 items=1 ppid=3985 pid=4028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.347000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:41:16.347000 audit: PATH item=0 name="/dev/fd/63" inode=26850 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.418436 kernel: audit: type=1307 audit(1761957676.347:945): cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:41:16.419076 kernel: audit: type=1302 audit(1761957676.347:945): item=0 name="/dev/fd/63" inode=26850 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.419162 kernel: audit: type=1327 audit(1761957676.347:945): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.347000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.349000 audit[4034]: AVC avc: denied { write } for pid=4034 comm="tee" name="fd" dev="proc" ino=26529 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.349000 audit[4034]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff290d37e3 a2=241 a3=1b6 items=1 ppid=3990 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.349000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:41:16.349000 audit: PATH item=0 name="/dev/fd/63" inode=26502 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.349000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.350000 audit[4030]: AVC avc: denied { write } for pid=4030 comm="tee" name="fd" dev="proc" ino=26533 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.350000 audit[4030]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff5352d7e3 a2=241 a3=1b6 items=1 ppid=3986 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.350000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:41:16.350000 audit: PATH item=0 name="/dev/fd/63" inode=26497 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.350000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.381000 audit[4050]: AVC avc: denied { write } for pid=4050 comm="tee" name="fd" dev="proc" ino=26540 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.381000 audit[4050]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffeed0fc7e5 a2=241 a3=1b6 items=1 ppid=3993 pid=4050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.381000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:41:16.381000 audit: PATH item=0 name="/dev/fd/63" inode=26515 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.381000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.464000 audit[4060]: AVC avc: denied { write } for pid=4060 comm="tee" name="fd" dev="proc" ino=26545 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.464000 audit[4060]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff05db77d4 a2=241 a3=1b6 items=1 ppid=3997 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.464000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:41:16.464000 audit: PATH item=0 name="/dev/fd/63" inode=26537 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.466000 audit[4053]: AVC avc: denied { write } for pid=4053 comm="tee" name="fd" dev="proc" ino=26549 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:41:16.466000 audit[4053]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd6a9357e3 a2=241 a3=1b6 items=1 ppid=4004 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.466000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:41:16.466000 audit: PATH item=0 name="/dev/fd/63" inode=26522 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:16.466000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.464000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.783000 audit: BPF prog-id=148 op=LOAD Nov 1 00:41:16.783000 audit[4083]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea284ed40 a2=98 a3=1fffffffffffffff items=0 ppid=3988 pid=4083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.783000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:41:16.783000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.785000 audit: BPF prog-id=149 op=LOAD Nov 1 00:41:16.785000 audit[4083]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea284ec20 a2=94 a3=3 items=0 ppid=3988 pid=4083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.785000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:41:16.788000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit[4083]: AVC avc: denied { bpf } for pid=4083 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.788000 audit: BPF prog-id=150 op=LOAD Nov 1 00:41:16.788000 audit[4083]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea284ec60 a2=94 a3=7ffea284ee40 items=0 ppid=3988 pid=4083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.788000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:41:16.788000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:41:16.789000 audit[4083]: AVC avc: denied { perfmon } for pid=4083 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.789000 audit[4083]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffea284ed30 a2=50 a3=a000000085 items=0 ppid=3988 pid=4083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.789000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.803000 audit: BPF prog-id=151 op=LOAD Nov 1 00:41:16.803000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdc2e68460 a2=98 a3=3 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.803000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.804000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.805000 audit: BPF prog-id=152 op=LOAD Nov 1 00:41:16.805000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc2e68250 a2=94 a3=54428f items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.805000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.809000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.809000 audit: BPF prog-id=153 op=LOAD Nov 1 00:41:16.809000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc2e68280 a2=94 a3=2 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.809000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.810000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.951000 audit: BPF prog-id=154 op=LOAD Nov 1 00:41:16.951000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc2e68140 a2=94 a3=1 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.951000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.952000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:41:16.952000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.952000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdc2e68210 a2=50 a3=7ffdc2e682f0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.952000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.964000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.964000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2e68150 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.964000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.964000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.964000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2e68180 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.964000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2e68090 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2e681a0 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2e68180 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2e68170 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2e681a0 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2e68180 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2e681a0 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2e68170 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2e681e0 a2=28 a3=0 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdc2e67f90 a2=50 a3=1 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit: BPF prog-id=155 op=LOAD Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdc2e67f90 a2=94 a3=5 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdc2e68040 a2=50 a3=1 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdc2e68160 a2=4 a3=38 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.965000 audit[4084]: AVC avc: denied { confidentiality } for pid=4084 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:41:16.965000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc2e681b0 a2=94 a3=6 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.965000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { confidentiality } for pid=4084 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:41:16.966000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc2e67960 a2=94 a3=88 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.966000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { perfmon } for pid=4084 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { bpf } for pid=4084 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.966000 audit[4084]: AVC avc: denied { confidentiality } for pid=4084 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:41:16.966000 audit[4084]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc2e67960 a2=94 a3=88 items=0 ppid=3988 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.966000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit: BPF prog-id=156 op=LOAD Nov 1 00:41:16.978000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2c3fb880 a2=98 a3=1999999999999999 items=0 ppid=3988 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.978000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:41:16.978000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.978000 audit: BPF prog-id=157 op=LOAD Nov 1 00:41:16.978000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2c3fb760 a2=94 a3=ffff items=0 ppid=3988 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.978000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:41:16.979000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { perfmon } for pid=4103 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit[4103]: AVC avc: denied { bpf } for pid=4103 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:16.979000 audit: BPF prog-id=158 op=LOAD Nov 1 00:41:16.979000 audit[4103]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2c3fb7a0 a2=94 a3=7fff2c3fb980 items=0 ppid=3988 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:16.979000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:41:16.979000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:41:17.066204 (udev-worker)[3898]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:41:17.073845 systemd-networkd[1462]: vxlan.calico: Link UP Nov 1 00:41:17.073854 systemd-networkd[1462]: vxlan.calico: Gained carrier Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.101000 audit: BPF prog-id=159 op=LOAD Nov 1 00:41:17.101000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffcddf55b0 a2=98 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.101000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.101000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:41:17.106549 (udev-worker)[4129]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:41:17.107828 (udev-worker)[3899]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit: BPF prog-id=160 op=LOAD Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffcddf53c0 a2=94 a3=54428f items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit: BPF prog-id=161 op=LOAD Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffcddf53f0 a2=94 a3=2 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcddf52c0 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcddf52f0 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcddf5200 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcddf5310 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcddf52f0 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcddf52e0 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcddf5310 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcddf52f0 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcddf5310 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcddf52e0 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcddf5350 a2=28 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.138000 audit: BPF prog-id=162 op=LOAD Nov 1 00:41:17.138000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffcddf51c0 a2=94 a3=0 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.138000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.138000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fffcddf51b0 a2=50 a3=2800 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.139000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fffcddf51b0 a2=50 a3=2800 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.139000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit: BPF prog-id=163 op=LOAD Nov 1 00:41:17.139000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffcddf49d0 a2=94 a3=2 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.139000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.139000 audit: BPF prog-id=163 op=UNLOAD Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.139000 audit: BPF prog-id=164 op=LOAD Nov 1 00:41:17.139000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffcddf4ad0 a2=94 a3=30 items=0 ppid=3988 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.139000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.148000 audit: BPF prog-id=165 op=LOAD Nov 1 00:41:17.148000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd8a9f7cd0 a2=98 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.148000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.149000 audit: BPF prog-id=165 op=UNLOAD Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.150000 audit: BPF prog-id=166 op=LOAD Nov 1 00:41:17.150000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd8a9f7ac0 a2=94 a3=54428f items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.150000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.151000 audit: BPF prog-id=166 op=UNLOAD Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.151000 audit: BPF prog-id=167 op=LOAD Nov 1 00:41:17.151000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd8a9f7af0 a2=94 a3=2 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.151000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.151000 audit: BPF prog-id=167 op=UNLOAD Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit: BPF prog-id=168 op=LOAD Nov 1 00:41:17.275000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd8a9f79b0 a2=94 a3=1 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.275000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.275000 audit: BPF prog-id=168 op=UNLOAD Nov 1 00:41:17.275000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.275000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd8a9f7a80 a2=50 a3=7ffd8a9f7b60 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.275000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd8a9f79c0 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd8a9f79f0 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd8a9f7900 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd8a9f7a10 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd8a9f79f0 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd8a9f79e0 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd8a9f7a10 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd8a9f79f0 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd8a9f7a10 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd8a9f79e0 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd8a9f7a50 a2=28 a3=0 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd8a9f7800 a2=50 a3=1 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit: BPF prog-id=169 op=LOAD Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd8a9f7800 a2=94 a3=5 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit: BPF prog-id=169 op=UNLOAD Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd8a9f78b0 a2=50 a3=1 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd8a9f79d0 a2=4 a3=38 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.288000 audit[4134]: AVC avc: denied { confidentiality } for pid=4134 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:41:17.288000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd8a9f7a20 a2=94 a3=6 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.288000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { confidentiality } for pid=4134 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:41:17.289000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd8a9f71d0 a2=94 a3=88 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.289000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: AVC avc: denied { perfmon } for pid=4134 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.289000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd8a9f71d0 a2=94 a3=88 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.289000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.292000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.292000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd8a9f8c00 a2=10 a3=f8f00800 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.292000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.292000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.292000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd8a9f8aa0 a2=10 a3=3 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.292000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.292000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.292000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd8a9f8a40 a2=10 a3=3 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.292000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.292000 audit[4134]: AVC avc: denied { bpf } for pid=4134 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:17.292000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd8a9f8a40 a2=10 a3=7 items=0 ppid=3988 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.292000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:41:17.299000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:41:17.389000 audit[4158]: NETFILTER_CFG table=mangle:105 family=2 entries=16 op=nft_register_chain pid=4158 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:17.389000 audit[4158]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffeba3a10d0 a2=0 a3=7ffeba3a10bc items=0 ppid=3988 pid=4158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.389000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:17.404000 audit[4159]: NETFILTER_CFG table=nat:106 family=2 entries=15 op=nft_register_chain pid=4159 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:17.404000 audit[4159]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffcd4155f70 a2=0 a3=7ffcd4155f5c items=0 ppid=3988 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.404000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:17.408000 audit[4160]: NETFILTER_CFG table=filter:107 family=2 entries=39 op=nft_register_chain pid=4160 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:17.408000 audit[4160]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffe8e2c6110 a2=0 a3=7ffe8e2c60fc items=0 ppid=3988 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.408000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:17.412000 audit[4157]: NETFILTER_CFG table=raw:108 family=2 entries=21 op=nft_register_chain pid=4157 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:17.412000 audit[4157]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffd834dfb50 a2=0 a3=7ffd834dfb3c items=0 ppid=3988 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:17.412000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:18.308368 systemd-networkd[1462]: vxlan.calico: Gained IPv6LL Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:15.520 [INFO][3938] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:15.525 [INFO][3938] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" iface="eth0" netns="/var/run/netns/cni-8b4b7ac2-70dc-ee48-a2b1-f5ebb175403d" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:15.526 [INFO][3938] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" iface="eth0" netns="/var/run/netns/cni-8b4b7ac2-70dc-ee48-a2b1-f5ebb175403d" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:15.533 [INFO][3938] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" iface="eth0" netns="/var/run/netns/cni-8b4b7ac2-70dc-ee48-a2b1-f5ebb175403d" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:15.533 [INFO][3938] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:15.533 [INFO][3938] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:19.754 [INFO][3966] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:19.757 [INFO][3966] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:19.757 [INFO][3966] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:19.772 [WARNING][3966] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:19.772 [INFO][3966] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:19.774 [INFO][3966] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:19.779490 env[1734]: 2025-11-01 00:41:19.776 [INFO][3938] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:41:19.783967 systemd[1]: run-netns-cni\x2d8b4b7ac2\x2d70dc\x2dee48\x2da2b1\x2df5ebb175403d.mount: Deactivated successfully. Nov 1 00:41:19.785778 env[1734]: time="2025-11-01T00:41:19.785730704Z" level=info msg="TearDown network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\" successfully" Nov 1 00:41:19.785888 env[1734]: time="2025-11-01T00:41:19.785774825Z" level=info msg="StopPodSandbox for \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\" returns successfully" Nov 1 00:41:19.876485 kubelet[2612]: I1101 00:41:19.876382 2612 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f789da1f-d0a3-42cc-ae39-26e3b499bb59-whisker-backend-key-pair\") pod \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\" (UID: \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\") " Nov 1 00:41:19.877171 kubelet[2612]: I1101 00:41:19.876555 2612 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vdxpj\" (UniqueName: \"kubernetes.io/projected/f789da1f-d0a3-42cc-ae39-26e3b499bb59-kube-api-access-vdxpj\") pod \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\" (UID: \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\") " Nov 1 00:41:19.877171 kubelet[2612]: I1101 00:41:19.876613 2612 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f789da1f-d0a3-42cc-ae39-26e3b499bb59-whisker-ca-bundle\") pod \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\" (UID: \"f789da1f-d0a3-42cc-ae39-26e3b499bb59\") " Nov 1 00:41:19.885662 kubelet[2612]: I1101 00:41:19.885603 2612 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f789da1f-d0a3-42cc-ae39-26e3b499bb59-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "f789da1f-d0a3-42cc-ae39-26e3b499bb59" (UID: "f789da1f-d0a3-42cc-ae39-26e3b499bb59"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:41:19.896310 systemd[1]: var-lib-kubelet-pods-f789da1f\x2dd0a3\x2d42cc\x2dae39\x2d26e3b499bb59-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:41:19.898740 kubelet[2612]: I1101 00:41:19.898688 2612 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f789da1f-d0a3-42cc-ae39-26e3b499bb59-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "f789da1f-d0a3-42cc-ae39-26e3b499bb59" (UID: "f789da1f-d0a3-42cc-ae39-26e3b499bb59"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:41:19.903206 systemd[1]: var-lib-kubelet-pods-f789da1f\x2dd0a3\x2d42cc\x2dae39\x2d26e3b499bb59-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvdxpj.mount: Deactivated successfully. Nov 1 00:41:19.911407 kubelet[2612]: I1101 00:41:19.911350 2612 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f789da1f-d0a3-42cc-ae39-26e3b499bb59-kube-api-access-vdxpj" (OuterVolumeSpecName: "kube-api-access-vdxpj") pod "f789da1f-d0a3-42cc-ae39-26e3b499bb59" (UID: "f789da1f-d0a3-42cc-ae39-26e3b499bb59"). InnerVolumeSpecName "kube-api-access-vdxpj". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:41:19.987465 kubelet[2612]: I1101 00:41:19.987413 2612 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f789da1f-d0a3-42cc-ae39-26e3b499bb59-whisker-backend-key-pair\") on node \"ip-172-31-20-5\" DevicePath \"\"" Nov 1 00:41:19.987636 kubelet[2612]: I1101 00:41:19.987497 2612 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f789da1f-d0a3-42cc-ae39-26e3b499bb59-whisker-ca-bundle\") on node \"ip-172-31-20-5\" DevicePath \"\"" Nov 1 00:41:19.987636 kubelet[2612]: I1101 00:41:19.987515 2612 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-vdxpj\" (UniqueName: \"kubernetes.io/projected/f789da1f-d0a3-42cc-ae39-26e3b499bb59-kube-api-access-vdxpj\") on node \"ip-172-31-20-5\" DevicePath \"\"" Nov 1 00:41:20.514012 systemd[1]: Removed slice kubepods-besteffort-podf789da1f_d0a3_42cc_ae39_26e3b499bb59.slice. Nov 1 00:41:20.676469 systemd[1]: Created slice kubepods-besteffort-pod6fd5df7e_93f8_425a_9311_2ce972e2adf0.slice. Nov 1 00:41:20.793064 kubelet[2612]: I1101 00:41:20.792930 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6fd5df7e-93f8-425a-9311-2ce972e2adf0-whisker-ca-bundle\") pod \"whisker-f4f4f9df6-7k8lt\" (UID: \"6fd5df7e-93f8-425a-9311-2ce972e2adf0\") " pod="calico-system/whisker-f4f4f9df6-7k8lt" Nov 1 00:41:20.793064 kubelet[2612]: I1101 00:41:20.793029 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/6fd5df7e-93f8-425a-9311-2ce972e2adf0-whisker-backend-key-pair\") pod \"whisker-f4f4f9df6-7k8lt\" (UID: \"6fd5df7e-93f8-425a-9311-2ce972e2adf0\") " pod="calico-system/whisker-f4f4f9df6-7k8lt" Nov 1 00:41:20.793305 kubelet[2612]: I1101 00:41:20.793087 2612 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9q4qn\" (UniqueName: \"kubernetes.io/projected/6fd5df7e-93f8-425a-9311-2ce972e2adf0-kube-api-access-9q4qn\") pod \"whisker-f4f4f9df6-7k8lt\" (UID: \"6fd5df7e-93f8-425a-9311-2ce972e2adf0\") " pod="calico-system/whisker-f4f4f9df6-7k8lt" Nov 1 00:41:20.982158 env[1734]: time="2025-11-01T00:41:20.982107311Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f4f4f9df6-7k8lt,Uid:6fd5df7e-93f8-425a-9311-2ce972e2adf0,Namespace:calico-system,Attempt:0,}" Nov 1 00:41:21.053626 env[1734]: time="2025-11-01T00:41:21.053424712Z" level=info msg="StopPodSandbox for \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\"" Nov 1 00:41:21.053991 env[1734]: time="2025-11-01T00:41:21.053909484Z" level=info msg="StopPodSandbox for \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\"" Nov 1 00:41:21.053991 env[1734]: time="2025-11-01T00:41:21.054485479Z" level=info msg="StopPodSandbox for \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\"" Nov 1 00:41:21.056256 kubelet[2612]: I1101 00:41:21.056223 2612 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="f789da1f-d0a3-42cc-ae39-26e3b499bb59" path="/var/lib/kubelet/pods/f789da1f-d0a3-42cc-ae39-26e3b499bb59/volumes" Nov 1 00:41:21.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.5:22-147.75.109.163:43678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.178460 systemd[1]: Started sshd@7-172.31.20.5:22-147.75.109.163:43678.service. Nov 1 00:41:21.404270 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:41:21.404425 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicbdf3894a72: link becomes ready Nov 1 00:41:21.400856 (udev-worker)[4228]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:41:21.406669 systemd-networkd[1462]: calicbdf3894a72: Link UP Nov 1 00:41:21.406971 systemd-networkd[1462]: calicbdf3894a72: Gained carrier Nov 1 00:41:21.424000 audit[4198]: USER_ACCT pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:21.426601 kernel: kauditd_printk_skb: 554 callbacks suppressed Nov 1 00:41:21.426699 kernel: audit: type=1101 audit(1761957681.424:1054): pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:21.433393 sshd[4198]: Accepted publickey for core from 147.75.109.163 port 43678 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:21.443192 kernel: audit: type=1103 audit(1761957681.434:1055): pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:21.434000 audit[4198]: CRED_ACQ pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:21.442511 sshd[4198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:21.451076 kernel: audit: type=1006 audit(1761957681.434:1056): pid=4198 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Nov 1 00:41:21.458354 kernel: audit: type=1300 audit(1761957681.434:1056): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd3583140 a2=3 a3=0 items=0 ppid=1 pid=4198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.434000 audit[4198]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd3583140 a2=3 a3=0 items=0 ppid=1 pid=4198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.470091 kernel: audit: type=1327 audit(1761957681.434:1056): proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:21.434000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:21.472164 systemd[1]: Started session-8.scope. Nov 1 00:41:21.475632 systemd-logind[1723]: New session 8 of user core. Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.073 [INFO][4181] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0 whisker-f4f4f9df6- calico-system 6fd5df7e-93f8-425a-9311-2ce972e2adf0 986 0 2025-11-01 00:41:20 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:f4f4f9df6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-20-5 whisker-f4f4f9df6-7k8lt eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calicbdf3894a72 [] [] }} ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Namespace="calico-system" Pod="whisker-f4f4f9df6-7k8lt" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.073 [INFO][4181] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Namespace="calico-system" Pod="whisker-f4f4f9df6-7k8lt" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.114 [INFO][4191] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" HandleID="k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Workload="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.116 [INFO][4191] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" HandleID="k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Workload="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d0eb0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-20-5", "pod":"whisker-f4f4f9df6-7k8lt", "timestamp":"2025-11-01 00:41:21.114992585 +0000 UTC"}, Hostname:"ip-172-31-20-5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.116 [INFO][4191] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.116 [INFO][4191] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.116 [INFO][4191] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-5' Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.128 [INFO][4191] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.326 [INFO][4191] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.333 [INFO][4191] ipam/ipam.go 511: Trying affinity for 192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.336 [INFO][4191] ipam/ipam.go 158: Attempting to load block cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.340 [INFO][4191] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.340 [INFO][4191] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.54.0/26 handle="k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.343 [INFO][4191] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1 Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.367 [INFO][4191] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.54.0/26 handle="k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.381 [INFO][4191] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.54.1/26] block=192.168.54.0/26 handle="k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.381 [INFO][4191] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.54.1/26] handle="k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" host="ip-172-31-20-5" Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.381 [INFO][4191] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:21.490359 env[1734]: 2025-11-01 00:41:21.381 [INFO][4191] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.54.1/26] IPv6=[] ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" HandleID="k8s-pod-network.9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Workload="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" Nov 1 00:41:21.491668 env[1734]: 2025-11-01 00:41:21.389 [INFO][4181] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Namespace="calico-system" Pod="whisker-f4f4f9df6-7k8lt" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0", GenerateName:"whisker-f4f4f9df6-", Namespace:"calico-system", SelfLink:"", UID:"6fd5df7e-93f8-425a-9311-2ce972e2adf0", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 41, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f4f4f9df6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"", Pod:"whisker-f4f4f9df6-7k8lt", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.54.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calicbdf3894a72", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:21.491668 env[1734]: 2025-11-01 00:41:21.389 [INFO][4181] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.54.1/32] ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Namespace="calico-system" Pod="whisker-f4f4f9df6-7k8lt" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" Nov 1 00:41:21.491668 env[1734]: 2025-11-01 00:41:21.389 [INFO][4181] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicbdf3894a72 ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Namespace="calico-system" Pod="whisker-f4f4f9df6-7k8lt" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" Nov 1 00:41:21.491668 env[1734]: 2025-11-01 00:41:21.404 [INFO][4181] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Namespace="calico-system" Pod="whisker-f4f4f9df6-7k8lt" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" Nov 1 00:41:21.491668 env[1734]: 2025-11-01 00:41:21.405 [INFO][4181] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Namespace="calico-system" Pod="whisker-f4f4f9df6-7k8lt" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0", GenerateName:"whisker-f4f4f9df6-", Namespace:"calico-system", SelfLink:"", UID:"6fd5df7e-93f8-425a-9311-2ce972e2adf0", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 41, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f4f4f9df6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1", Pod:"whisker-f4f4f9df6-7k8lt", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.54.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calicbdf3894a72", MAC:"d6:fa:5d:c4:b6:dd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:21.491668 env[1734]: 2025-11-01 00:41:21.447 [INFO][4181] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1" Namespace="calico-system" Pod="whisker-f4f4f9df6-7k8lt" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--f4f4f9df6--7k8lt-eth0" Nov 1 00:41:21.508420 kernel: audit: type=1105 audit(1761957681.499:1057): pid=4198 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:21.499000 audit[4198]: USER_START pid=4198 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:21.508000 audit[4257]: CRED_ACQ pid=4257 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:21.515444 kernel: audit: type=1103 audit(1761957681.508:1058): pid=4257 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:21.564720 kernel: audit: type=1325 audit(1761957681.518:1059): table=filter:109 family=2 entries=59 op=nft_register_chain pid=4253 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:21.564861 kernel: audit: type=1300 audit(1761957681.518:1059): arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffe58a7af50 a2=0 a3=7ffe58a7af3c items=0 ppid=3988 pid=4253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.518000 audit[4253]: NETFILTER_CFG table=filter:109 family=2 entries=59 op=nft_register_chain pid=4253 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:21.518000 audit[4253]: SYSCALL arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffe58a7af50 a2=0 a3=7ffe58a7af3c items=0 ppid=3988 pid=4253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.518000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:21.576078 kernel: audit: type=1327 audit(1761957681.518:1059): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:21.581414 env[1734]: time="2025-11-01T00:41:21.579478601Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:41:21.581414 env[1734]: time="2025-11-01T00:41:21.579543561Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:41:21.581414 env[1734]: time="2025-11-01T00:41:21.579564622Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:41:21.581414 env[1734]: time="2025-11-01T00:41:21.579739895Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1 pid=4272 runtime=io.containerd.runc.v2 Nov 1 00:41:21.660177 systemd[1]: Started cri-containerd-9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1.scope. Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.716000 audit: BPF prog-id=170 op=LOAD Nov 1 00:41:21.718000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.718000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4272 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963613831663636656665383731313964646565666463363838653131 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4272 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963613831663636656665383731313964646565666463363838653131 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.723000 audit: BPF prog-id=171 op=LOAD Nov 1 00:41:21.723000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000308350 items=0 ppid=4272 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963613831663636656665383731313964646565666463363838653131 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.725000 audit: BPF prog-id=172 op=LOAD Nov 1 00:41:21.725000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000308398 items=0 ppid=4272 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963613831663636656665383731313964646565666463363838653131 Nov 1 00:41:21.726000 audit: BPF prog-id=172 op=UNLOAD Nov 1 00:41:21.726000 audit: BPF prog-id=171 op=UNLOAD Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:21.726000 audit: BPF prog-id=173 op=LOAD Nov 1 00:41:21.726000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003087a8 items=0 ppid=4272 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:21.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963613831663636656665383731313964646565666463363838653131 Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.604 [INFO][4236] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.604 [INFO][4236] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" iface="eth0" netns="/var/run/netns/cni-a456e503-7314-9074-4547-e8254b600787" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.604 [INFO][4236] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" iface="eth0" netns="/var/run/netns/cni-a456e503-7314-9074-4547-e8254b600787" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.609 [INFO][4236] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" iface="eth0" netns="/var/run/netns/cni-a456e503-7314-9074-4547-e8254b600787" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.609 [INFO][4236] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.609 [INFO][4236] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.818 [INFO][4288] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.824 [INFO][4288] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.824 [INFO][4288] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.850 [WARNING][4288] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.850 [INFO][4288] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.854 [INFO][4288] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:21.859571 env[1734]: 2025-11-01 00:41:21.856 [INFO][4236] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:41:21.860849 env[1734]: time="2025-11-01T00:41:21.859750372Z" level=info msg="TearDown network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\" successfully" Nov 1 00:41:21.860849 env[1734]: time="2025-11-01T00:41:21.859802882Z" level=info msg="StopPodSandbox for \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\" returns successfully" Nov 1 00:41:21.861308 env[1734]: time="2025-11-01T00:41:21.861266264Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-s5tsw,Uid:7d27004b-6f0c-4540-b573-3c4c5a8ee5bb,Namespace:kube-system,Attempt:1,}" Nov 1 00:41:21.876841 env[1734]: time="2025-11-01T00:41:21.876774795Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f4f4f9df6-7k8lt,Uid:6fd5df7e-93f8-425a-9311-2ce972e2adf0,Namespace:calico-system,Attempt:0,} returns sandbox id \"9ca81f66efe87119ddeefdc688e11b61ef1e51222fcbeca333116da6dd8f48d1\"" Nov 1 00:41:21.905945 systemd[1]: run-netns-cni\x2da456e503\x2d7314\x2d9074\x2d4547\x2de8254b600787.mount: Deactivated successfully. Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.684 [INFO][4237] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.684 [INFO][4237] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" iface="eth0" netns="/var/run/netns/cni-5393428f-6281-fb80-17af-097b341b8cf9" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.684 [INFO][4237] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" iface="eth0" netns="/var/run/netns/cni-5393428f-6281-fb80-17af-097b341b8cf9" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.685 [INFO][4237] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" iface="eth0" netns="/var/run/netns/cni-5393428f-6281-fb80-17af-097b341b8cf9" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.685 [INFO][4237] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.685 [INFO][4237] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.878 [INFO][4304] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.879 [INFO][4304] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.879 [INFO][4304] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.895 [WARNING][4304] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.913 [INFO][4304] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.915 [INFO][4304] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:21.929874 env[1734]: 2025-11-01 00:41:21.921 [INFO][4237] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:41:21.934286 systemd[1]: run-netns-cni\x2d5393428f\x2d6281\x2dfb80\x2d17af\x2d097b341b8cf9.mount: Deactivated successfully. Nov 1 00:41:21.940140 env[1734]: time="2025-11-01T00:41:21.939920312Z" level=info msg="TearDown network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\" successfully" Nov 1 00:41:21.940335 env[1734]: time="2025-11-01T00:41:21.940310782Z" level=info msg="StopPodSandbox for \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\" returns successfully" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.745 [INFO][4238] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.745 [INFO][4238] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" iface="eth0" netns="/var/run/netns/cni-ef30f58a-9fb0-f2c7-b214-ce2810cbca16" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.745 [INFO][4238] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" iface="eth0" netns="/var/run/netns/cni-ef30f58a-9fb0-f2c7-b214-ce2810cbca16" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.746 [INFO][4238] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" iface="eth0" netns="/var/run/netns/cni-ef30f58a-9fb0-f2c7-b214-ce2810cbca16" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.746 [INFO][4238] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.746 [INFO][4238] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.919 [INFO][4318] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.920 [INFO][4318] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.920 [INFO][4318] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.928 [WARNING][4318] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.928 [INFO][4318] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.940 [INFO][4318] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:21.948216 env[1734]: 2025-11-01 00:41:21.945 [INFO][4238] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:41:21.952807 systemd[1]: run-netns-cni\x2def30f58a\x2d9fb0\x2df2c7\x2db214\x2dce2810cbca16.mount: Deactivated successfully. Nov 1 00:41:21.954936 env[1734]: time="2025-11-01T00:41:21.954888334Z" level=info msg="TearDown network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\" successfully" Nov 1 00:41:21.955090 env[1734]: time="2025-11-01T00:41:21.955067731Z" level=info msg="StopPodSandbox for \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\" returns successfully" Nov 1 00:41:21.983735 env[1734]: time="2025-11-01T00:41:21.983698220Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694c7bcdf8-w5cjp,Uid:c310f163-2203-4d17-8fa6-ed4211a3c699,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:41:21.985299 env[1734]: time="2025-11-01T00:41:21.984837523Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5wbbl,Uid:249cc7c4-c107-468b-9f47-3a65adfb9b30,Namespace:calico-system,Attempt:1,}" Nov 1 00:41:22.052176 env[1734]: time="2025-11-01T00:41:22.052139288Z" level=info msg="StopPodSandbox for \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\"" Nov 1 00:41:22.053283 env[1734]: time="2025-11-01T00:41:22.052132435Z" level=info msg="StopPodSandbox for \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\"" Nov 1 00:41:22.077433 env[1734]: time="2025-11-01T00:41:22.076144112Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:41:22.356172 env[1734]: time="2025-11-01T00:41:22.356088273Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:22.368465 env[1734]: time="2025-11-01T00:41:22.368350292Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:41:22.379869 systemd-networkd[1462]: cali48cf154d9ea: Link UP Nov 1 00:41:22.381429 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali48cf154d9ea: link becomes ready Nov 1 00:41:22.381100 systemd-networkd[1462]: cali48cf154d9ea: Gained carrier Nov 1 00:41:22.409078 kubelet[2612]: E1101 00:41:22.404455 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:41:22.429474 kubelet[2612]: E1101 00:41:22.429405 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.011 [INFO][4335] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0 coredns-668d6bf9bc- kube-system 7d27004b-6f0c-4540-b573-3c4c5a8ee5bb 1020 0 2025-11-01 00:40:16 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-20-5 coredns-668d6bf9bc-s5tsw eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali48cf154d9ea [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Namespace="kube-system" Pod="coredns-668d6bf9bc-s5tsw" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.012 [INFO][4335] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Namespace="kube-system" Pod="coredns-668d6bf9bc-s5tsw" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.189 [INFO][4349] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" HandleID="k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.194 [INFO][4349] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" HandleID="k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000125de0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-20-5", "pod":"coredns-668d6bf9bc-s5tsw", "timestamp":"2025-11-01 00:41:22.18983668 +0000 UTC"}, Hostname:"ip-172-31-20-5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.195 [INFO][4349] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.196 [INFO][4349] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.196 [INFO][4349] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-5' Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.215 [INFO][4349] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.240 [INFO][4349] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.249 [INFO][4349] ipam/ipam.go 511: Trying affinity for 192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.252 [INFO][4349] ipam/ipam.go 158: Attempting to load block cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.264 [INFO][4349] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.264 [INFO][4349] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.54.0/26 handle="k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.267 [INFO][4349] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9 Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.288 [INFO][4349] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.54.0/26 handle="k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.313 [INFO][4349] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.54.2/26] block=192.168.54.0/26 handle="k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.313 [INFO][4349] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.54.2/26] handle="k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" host="ip-172-31-20-5" Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.313 [INFO][4349] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:22.478105 env[1734]: 2025-11-01 00:41:22.313 [INFO][4349] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.54.2/26] IPv6=[] ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" HandleID="k8s-pod-network.7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:22.480246 env[1734]: 2025-11-01 00:41:22.329 [INFO][4335] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Namespace="kube-system" Pod="coredns-668d6bf9bc-s5tsw" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7d27004b-6f0c-4540-b573-3c4c5a8ee5bb", ResourceVersion:"1020", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"", Pod:"coredns-668d6bf9bc-s5tsw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.54.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali48cf154d9ea", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:22.480246 env[1734]: 2025-11-01 00:41:22.329 [INFO][4335] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.54.2/32] ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Namespace="kube-system" Pod="coredns-668d6bf9bc-s5tsw" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:22.480246 env[1734]: 2025-11-01 00:41:22.329 [INFO][4335] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali48cf154d9ea ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Namespace="kube-system" Pod="coredns-668d6bf9bc-s5tsw" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:22.480246 env[1734]: 2025-11-01 00:41:22.397 [INFO][4335] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Namespace="kube-system" Pod="coredns-668d6bf9bc-s5tsw" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:22.480246 env[1734]: 2025-11-01 00:41:22.416 [INFO][4335] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Namespace="kube-system" Pod="coredns-668d6bf9bc-s5tsw" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7d27004b-6f0c-4540-b573-3c4c5a8ee5bb", ResourceVersion:"1020", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9", Pod:"coredns-668d6bf9bc-s5tsw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.54.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali48cf154d9ea", MAC:"52:d2:84:9c:31:31", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:22.480246 env[1734]: 2025-11-01 00:41:22.466 [INFO][4335] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9" Namespace="kube-system" Pod="coredns-668d6bf9bc-s5tsw" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:41:22.481346 kubelet[2612]: E1101 00:41:22.481276 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:40c8e9570f674faf992af5067a87a776,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-9q4qn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f4f4f9df6-7k8lt_calico-system(6fd5df7e-93f8-425a-9311-2ce972e2adf0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:22.493553 env[1734]: time="2025-11-01T00:41:22.493505237Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.369 [INFO][4394] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.369 [INFO][4394] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" iface="eth0" netns="/var/run/netns/cni-fa0192b6-e91e-05bf-0675-915d05013bca" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.370 [INFO][4394] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" iface="eth0" netns="/var/run/netns/cni-fa0192b6-e91e-05bf-0675-915d05013bca" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.370 [INFO][4394] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" iface="eth0" netns="/var/run/netns/cni-fa0192b6-e91e-05bf-0675-915d05013bca" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.370 [INFO][4394] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.370 [INFO][4394] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.585 [INFO][4419] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.585 [INFO][4419] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.585 [INFO][4419] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.603 [WARNING][4419] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.604 [INFO][4419] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.618 [INFO][4419] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:22.639260 env[1734]: 2025-11-01 00:41:22.623 [INFO][4394] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:41:22.642568 env[1734]: time="2025-11-01T00:41:22.641338185Z" level=info msg="TearDown network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\" successfully" Nov 1 00:41:22.642568 env[1734]: time="2025-11-01T00:41:22.641382639Z" level=info msg="StopPodSandbox for \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\" returns successfully" Nov 1 00:41:22.642969 env[1734]: time="2025-11-01T00:41:22.642929336Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7669f6697f-ds4tg,Uid:66ef8aaa-4cbe-4280-98d5-566c4289d009,Namespace:calico-system,Attempt:1,}" Nov 1 00:41:22.653430 sshd[4198]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:22.656000 audit[4198]: USER_END pid=4198 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:22.656000 audit[4198]: CRED_DISP pid=4198 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:22.658844 systemd[1]: sshd@7-172.31.20.5:22-147.75.109.163:43678.service: Deactivated successfully. Nov 1 00:41:22.659848 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:41:22.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.5:22-147.75.109.163:43678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:22.665682 systemd-logind[1723]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:41:22.669482 systemd-logind[1723]: Removed session 8. Nov 1 00:41:22.712252 env[1734]: time="2025-11-01T00:41:22.711903481Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:41:22.712252 env[1734]: time="2025-11-01T00:41:22.711975654Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:41:22.712252 env[1734]: time="2025-11-01T00:41:22.711993422Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:41:22.734444 env[1734]: time="2025-11-01T00:41:22.717630670Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9 pid=4464 runtime=io.containerd.runc.v2 Nov 1 00:41:22.760532 env[1734]: time="2025-11-01T00:41:22.757601104Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:22.760532 env[1734]: time="2025-11-01T00:41:22.759776920Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:41:22.763124 kubelet[2612]: E1101 00:41:22.762262 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:41:22.763124 kubelet[2612]: E1101 00:41:22.762343 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:41:22.763124 kubelet[2612]: E1101 00:41:22.762532 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9q4qn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f4f4f9df6-7k8lt_calico-system(6fd5df7e-93f8-425a-9311-2ce972e2adf0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:22.764229 kubelet[2612]: E1101 00:41:22.764150 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:41:22.795000 audit[4495]: NETFILTER_CFG table=filter:110 family=2 entries=42 op=nft_register_chain pid=4495 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:22.795000 audit[4495]: SYSCALL arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7ffcc4a6e9f0 a2=0 a3=7ffcc4a6e9dc items=0 ppid=3988 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:22.795000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:22.843924 systemd[1]: Started cri-containerd-7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9.scope. Nov 1 00:41:22.868421 systemd-networkd[1462]: cali819024acdca: Link UP Nov 1 00:41:22.874940 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:41:22.875064 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali819024acdca: link becomes ready Nov 1 00:41:22.877534 systemd-networkd[1462]: cali819024acdca: Gained carrier Nov 1 00:41:22.907499 systemd[1]: run-netns-cni\x2dfa0192b6\x2de91e\x2d05bf\x2d0675\x2d915d05013bca.mount: Deactivated successfully. Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.919000 audit: BPF prog-id=174 op=LOAD Nov 1 00:41:22.930000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.930000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4464 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:22.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766343065623833373862633164653933353237663330336234336537 Nov 1 00:41:22.932000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.289 [INFO][4355] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0 calico-apiserver-694c7bcdf8- calico-apiserver c310f163-2203-4d17-8fa6-ed4211a3c699 1021 0 2025-11-01 00:40:42 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:694c7bcdf8 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-20-5 calico-apiserver-694c7bcdf8-w5cjp eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali819024acdca [] [] }} ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-w5cjp" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.289 [INFO][4355] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-w5cjp" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.675 [INFO][4408] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" HandleID="k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.675 [INFO][4408] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" HandleID="k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000322a80), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-20-5", "pod":"calico-apiserver-694c7bcdf8-w5cjp", "timestamp":"2025-11-01 00:41:22.675284999 +0000 UTC"}, Hostname:"ip-172-31-20-5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.675 [INFO][4408] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.675 [INFO][4408] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.675 [INFO][4408] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-5' Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.721 [INFO][4408] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.731 [INFO][4408] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.740 [INFO][4408] ipam/ipam.go 511: Trying affinity for 192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.743 [INFO][4408] ipam/ipam.go 158: Attempting to load block cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.750 [INFO][4408] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.751 [INFO][4408] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.54.0/26 handle="k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.756 [INFO][4408] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841 Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.787 [INFO][4408] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.54.0/26 handle="k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.802 [INFO][4408] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.54.3/26] block=192.168.54.0/26 handle="k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.802 [INFO][4408] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.54.3/26] handle="k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" host="ip-172-31-20-5" Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.802 [INFO][4408] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:22.933718 env[1734]: 2025-11-01 00:41:22.802 [INFO][4408] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.54.3/26] IPv6=[] ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" HandleID="k8s-pod-network.0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:22.934713 env[1734]: 2025-11-01 00:41:22.811 [INFO][4355] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-w5cjp" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0", GenerateName:"calico-apiserver-694c7bcdf8-", Namespace:"calico-apiserver", SelfLink:"", UID:"c310f163-2203-4d17-8fa6-ed4211a3c699", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694c7bcdf8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"", Pod:"calico-apiserver-694c7bcdf8-w5cjp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.54.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali819024acdca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:22.934713 env[1734]: 2025-11-01 00:41:22.811 [INFO][4355] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.54.3/32] ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-w5cjp" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:22.934713 env[1734]: 2025-11-01 00:41:22.811 [INFO][4355] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali819024acdca ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-w5cjp" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:22.934713 env[1734]: 2025-11-01 00:41:22.880 [INFO][4355] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-w5cjp" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:22.934713 env[1734]: 2025-11-01 00:41:22.882 [INFO][4355] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-w5cjp" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0", GenerateName:"calico-apiserver-694c7bcdf8-", Namespace:"calico-apiserver", SelfLink:"", UID:"c310f163-2203-4d17-8fa6-ed4211a3c699", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694c7bcdf8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841", Pod:"calico-apiserver-694c7bcdf8-w5cjp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.54.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali819024acdca", MAC:"8e:fb:99:f1:86:8e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:22.934713 env[1734]: 2025-11-01 00:41:22.916 [INFO][4355] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-w5cjp" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:41:22.932000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4464 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:22.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766343065623833373862633164653933353237663330336234336537 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.938000 audit: BPF prog-id=175 op=LOAD Nov 1 00:41:22.938000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001cee40 items=0 ppid=4464 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:22.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766343065623833373862633164653933353237663330336234336537 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.940000 audit: BPF prog-id=176 op=LOAD Nov 1 00:41:22.940000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001cee88 items=0 ppid=4464 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:22.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766343065623833373862633164653933353237663330336234336537 Nov 1 00:41:22.944000 audit: BPF prog-id=176 op=UNLOAD Nov 1 00:41:22.945162 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali266f700ed4f: link becomes ready Nov 1 00:41:22.945000 audit: BPF prog-id=175 op=UNLOAD Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:22.945000 audit: BPF prog-id=177 op=LOAD Nov 1 00:41:22.945000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cf298 items=0 ppid=4464 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:22.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766343065623833373862633164653933353237663330336234336537 Nov 1 00:41:22.947466 systemd-networkd[1462]: cali266f700ed4f: Link UP Nov 1 00:41:22.947788 systemd-networkd[1462]: cali266f700ed4f: Gained carrier Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.674 [INFO][4395] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.683 [INFO][4395] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" iface="eth0" netns="/var/run/netns/cni-e95ff803-c129-d089-2265-97a8bdd6573f" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.683 [INFO][4395] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" iface="eth0" netns="/var/run/netns/cni-e95ff803-c129-d089-2265-97a8bdd6573f" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.684 [INFO][4395] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" iface="eth0" netns="/var/run/netns/cni-e95ff803-c129-d089-2265-97a8bdd6573f" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.684 [INFO][4395] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.684 [INFO][4395] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.864 [INFO][4474] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.867 [INFO][4474] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.918 [INFO][4474] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.948 [WARNING][4474] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.948 [INFO][4474] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.952 [INFO][4474] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:22.973950 env[1734]: 2025-11-01 00:41:22.967 [INFO][4395] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:41:22.978113 systemd[1]: run-netns-cni\x2de95ff803\x2dc129\x2dd089\x2d2265\x2d97a8bdd6573f.mount: Deactivated successfully. Nov 1 00:41:22.983649 env[1734]: time="2025-11-01T00:41:22.983587669Z" level=info msg="TearDown network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\" successfully" Nov 1 00:41:22.983649 env[1734]: time="2025-11-01T00:41:22.983647359Z" level=info msg="StopPodSandbox for \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\" returns successfully" Nov 1 00:41:22.984520 env[1734]: time="2025-11-01T00:41:22.984479326Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-qbfmr,Uid:6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2,Namespace:kube-system,Attempt:1,}" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.433 [INFO][4367] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0 csi-node-driver- calico-system 249cc7c4-c107-468b-9f47-3a65adfb9b30 1022 0 2025-11-01 00:40:49 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-20-5 csi-node-driver-5wbbl eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali266f700ed4f [] [] }} ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Namespace="calico-system" Pod="csi-node-driver-5wbbl" WorkloadEndpoint="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.456 [INFO][4367] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Namespace="calico-system" Pod="csi-node-driver-5wbbl" WorkloadEndpoint="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.771 [INFO][4424] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" HandleID="k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.771 [INFO][4424] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" HandleID="k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5980), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-20-5", "pod":"csi-node-driver-5wbbl", "timestamp":"2025-11-01 00:41:22.771117981 +0000 UTC"}, Hostname:"ip-172-31-20-5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.778 [INFO][4424] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.802 [INFO][4424] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.802 [INFO][4424] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-5' Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.821 [INFO][4424] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.832 [INFO][4424] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.844 [INFO][4424] ipam/ipam.go 511: Trying affinity for 192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.849 [INFO][4424] ipam/ipam.go 158: Attempting to load block cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.857 [INFO][4424] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.857 [INFO][4424] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.54.0/26 handle="k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.862 [INFO][4424] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21 Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.878 [INFO][4424] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.54.0/26 handle="k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.910 [INFO][4424] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.54.4/26] block=192.168.54.0/26 handle="k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.910 [INFO][4424] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.54.4/26] handle="k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" host="ip-172-31-20-5" Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.910 [INFO][4424] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:22.999943 env[1734]: 2025-11-01 00:41:22.910 [INFO][4424] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.54.4/26] IPv6=[] ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" HandleID="k8s-pod-network.67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:23.000927 env[1734]: 2025-11-01 00:41:22.917 [INFO][4367] cni-plugin/k8s.go 418: Populated endpoint ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Namespace="calico-system" Pod="csi-node-driver-5wbbl" WorkloadEndpoint="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"249cc7c4-c107-468b-9f47-3a65adfb9b30", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"", Pod:"csi-node-driver-5wbbl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.54.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali266f700ed4f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:23.000927 env[1734]: 2025-11-01 00:41:22.917 [INFO][4367] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.54.4/32] ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Namespace="calico-system" Pod="csi-node-driver-5wbbl" WorkloadEndpoint="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:23.000927 env[1734]: 2025-11-01 00:41:22.917 [INFO][4367] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali266f700ed4f ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Namespace="calico-system" Pod="csi-node-driver-5wbbl" WorkloadEndpoint="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:23.000927 env[1734]: 2025-11-01 00:41:22.950 [INFO][4367] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Namespace="calico-system" Pod="csi-node-driver-5wbbl" WorkloadEndpoint="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:23.000927 env[1734]: 2025-11-01 00:41:22.951 [INFO][4367] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Namespace="calico-system" Pod="csi-node-driver-5wbbl" WorkloadEndpoint="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"249cc7c4-c107-468b-9f47-3a65adfb9b30", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21", Pod:"csi-node-driver-5wbbl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.54.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali266f700ed4f", MAC:"76:34:33:b0:15:c7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:23.000927 env[1734]: 2025-11-01 00:41:22.982 [INFO][4367] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21" Namespace="calico-system" Pod="csi-node-driver-5wbbl" WorkloadEndpoint="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:41:23.046708 env[1734]: time="2025-11-01T00:41:23.046391469Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:41:23.052807 env[1734]: time="2025-11-01T00:41:23.050138740Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:41:23.052807 env[1734]: time="2025-11-01T00:41:23.050195800Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:41:23.056000 audit[4547]: NETFILTER_CFG table=filter:111 family=2 entries=54 op=nft_register_chain pid=4547 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:23.056000 audit[4547]: SYSCALL arch=c000003e syscall=46 success=yes exit=29396 a0=3 a1=7ffd9619d7d0 a2=0 a3=7ffd9619d7bc items=0 ppid=3988 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.056000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:23.064361 env[1734]: time="2025-11-01T00:41:23.061603276Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841 pid=4537 runtime=io.containerd.runc.v2 Nov 1 00:41:23.099657 env[1734]: time="2025-11-01T00:41:23.099575044Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:41:23.099867 env[1734]: time="2025-11-01T00:41:23.099839153Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:41:23.099993 env[1734]: time="2025-11-01T00:41:23.099968765Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:41:23.101330 env[1734]: time="2025-11-01T00:41:23.101287376Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-s5tsw,Uid:7d27004b-6f0c-4540-b573-3c4c5a8ee5bb,Namespace:kube-system,Attempt:1,} returns sandbox id \"7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9\"" Nov 1 00:41:23.107452 env[1734]: time="2025-11-01T00:41:23.107383734Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21 pid=4571 runtime=io.containerd.runc.v2 Nov 1 00:41:23.110347 env[1734]: time="2025-11-01T00:41:23.110300614Z" level=info msg="CreateContainer within sandbox \"7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:41:23.150598 env[1734]: time="2025-11-01T00:41:23.150541344Z" level=info msg="CreateContainer within sandbox \"7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"ab648df75be8b93a918063533c66fb953b83abec7100e04c82727bacb09c30d3\"" Nov 1 00:41:23.153727 env[1734]: time="2025-11-01T00:41:23.152678258Z" level=info msg="StartContainer for \"ab648df75be8b93a918063533c66fb953b83abec7100e04c82727bacb09c30d3\"" Nov 1 00:41:23.162000 audit[4607]: NETFILTER_CFG table=filter:112 family=2 entries=44 op=nft_register_chain pid=4607 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:23.164512 systemd[1]: Started cri-containerd-0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841.scope. Nov 1 00:41:23.162000 audit[4607]: SYSCALL arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7ffddf0f3a90 a2=0 a3=7ffddf0f3a7c items=0 ppid=3988 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.162000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:23.175247 systemd-networkd[1462]: calicbdf3894a72: Gained IPv6LL Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.206000 audit: BPF prog-id=178 op=LOAD Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4537 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061313761666338666262356436373035393036633262343063643738 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4537 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061313761666338666262356436373035393036633262343063643738 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.208000 audit: BPF prog-id=179 op=LOAD Nov 1 00:41:23.208000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002231e0 items=0 ppid=4537 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061313761666338666262356436373035393036633262343063643738 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.209000 audit: BPF prog-id=180 op=LOAD Nov 1 00:41:23.209000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000223228 items=0 ppid=4537 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061313761666338666262356436373035393036633262343063643738 Nov 1 00:41:23.209000 audit: BPF prog-id=180 op=UNLOAD Nov 1 00:41:23.209000 audit: BPF prog-id=179 op=UNLOAD Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.210000 audit: BPF prog-id=181 op=LOAD Nov 1 00:41:23.210000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000223638 items=0 ppid=4537 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061313761666338666262356436373035393036633262343063643738 Nov 1 00:41:23.225033 systemd[1]: Started cri-containerd-67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21.scope. Nov 1 00:41:23.262422 systemd[1]: Started cri-containerd-ab648df75be8b93a918063533c66fb953b83abec7100e04c82727bacb09c30d3.scope. Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.300000 audit: BPF prog-id=182 op=LOAD Nov 1 00:41:23.301000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.301000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4571 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637626136343739623062366232626231383834363261373036613065 Nov 1 00:41:23.301000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.301000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4571 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637626136343739623062366232626231383834363261373036613065 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit: BPF prog-id=183 op=LOAD Nov 1 00:41:23.302000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000238cd0 items=0 ppid=4571 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637626136343739623062366232626231383834363261373036613065 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.302000 audit: BPF prog-id=184 op=LOAD Nov 1 00:41:23.302000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000238d18 items=0 ppid=4571 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637626136343739623062366232626231383834363261373036613065 Nov 1 00:41:23.304000 audit: BPF prog-id=184 op=UNLOAD Nov 1 00:41:23.304000 audit: BPF prog-id=183 op=UNLOAD Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.304000 audit: BPF prog-id=185 op=LOAD Nov 1 00:41:23.304000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000239128 items=0 ppid=4571 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637626136343739623062366232626231383834363261373036613065 Nov 1 00:41:23.350947 env[1734]: time="2025-11-01T00:41:23.350897019Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694c7bcdf8-w5cjp,Uid:c310f163-2203-4d17-8fa6-ed4211a3c699,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841\"" Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.353000 audit: BPF prog-id=186 op=LOAD Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4464 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363438646637356265386239336139313830363335333363363666 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4464 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363438646637356265386239336139313830363335333363363666 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit: BPF prog-id=187 op=LOAD Nov 1 00:41:23.354000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000388400 items=0 ppid=4464 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363438646637356265386239336139313830363335333363363666 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.354000 audit: BPF prog-id=188 op=LOAD Nov 1 00:41:23.354000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000388448 items=0 ppid=4464 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363438646637356265386239336139313830363335333363363666 Nov 1 00:41:23.355000 audit: BPF prog-id=188 op=UNLOAD Nov 1 00:41:23.355000 audit: BPF prog-id=187 op=UNLOAD Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.355000 audit: BPF prog-id=189 op=LOAD Nov 1 00:41:23.355000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000388858 items=0 ppid=4464 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363438646637356265386239336139313830363335333363363666 Nov 1 00:41:23.361554 env[1734]: time="2025-11-01T00:41:23.361486776Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:41:23.381456 env[1734]: time="2025-11-01T00:41:23.381408706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5wbbl,Uid:249cc7c4-c107-468b-9f47-3a65adfb9b30,Namespace:calico-system,Attempt:1,} returns sandbox id \"67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21\"" Nov 1 00:41:23.407205 env[1734]: time="2025-11-01T00:41:23.407154503Z" level=info msg="StartContainer for \"ab648df75be8b93a918063533c66fb953b83abec7100e04c82727bacb09c30d3\" returns successfully" Nov 1 00:41:23.414969 systemd-networkd[1462]: cali3b8ec7aa1cd: Link UP Nov 1 00:41:23.418787 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3b8ec7aa1cd: link becomes ready Nov 1 00:41:23.417903 systemd-networkd[1462]: cali3b8ec7aa1cd: Gained carrier Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.007 [INFO][4479] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0 calico-kube-controllers-7669f6697f- calico-system 66ef8aaa-4cbe-4280-98d5-566c4289d009 1028 0 2025-11-01 00:40:49 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7669f6697f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-20-5 calico-kube-controllers-7669f6697f-ds4tg eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali3b8ec7aa1cd [] [] }} ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Namespace="calico-system" Pod="calico-kube-controllers-7669f6697f-ds4tg" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.007 [INFO][4479] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Namespace="calico-system" Pod="calico-kube-controllers-7669f6697f-ds4tg" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.237 [INFO][4556] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" HandleID="k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.237 [INFO][4556] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" HandleID="k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00037ab40), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-20-5", "pod":"calico-kube-controllers-7669f6697f-ds4tg", "timestamp":"2025-11-01 00:41:23.237291167 +0000 UTC"}, Hostname:"ip-172-31-20-5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.237 [INFO][4556] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.237 [INFO][4556] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.237 [INFO][4556] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-5' Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.274 [INFO][4556] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.288 [INFO][4556] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.333 [INFO][4556] ipam/ipam.go 511: Trying affinity for 192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.340 [INFO][4556] ipam/ipam.go 158: Attempting to load block cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.364 [INFO][4556] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.364 [INFO][4556] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.54.0/26 handle="k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.381 [INFO][4556] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734 Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.392 [INFO][4556] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.54.0/26 handle="k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.405 [INFO][4556] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.54.5/26] block=192.168.54.0/26 handle="k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.405 [INFO][4556] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.54.5/26] handle="k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" host="ip-172-31-20-5" Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.405 [INFO][4556] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:23.454135 env[1734]: 2025-11-01 00:41:23.405 [INFO][4556] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.54.5/26] IPv6=[] ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" HandleID="k8s-pod-network.51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:23.455287 env[1734]: 2025-11-01 00:41:23.408 [INFO][4479] cni-plugin/k8s.go 418: Populated endpoint ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Namespace="calico-system" Pod="calico-kube-controllers-7669f6697f-ds4tg" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0", GenerateName:"calico-kube-controllers-7669f6697f-", Namespace:"calico-system", SelfLink:"", UID:"66ef8aaa-4cbe-4280-98d5-566c4289d009", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7669f6697f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"", Pod:"calico-kube-controllers-7669f6697f-ds4tg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.54.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali3b8ec7aa1cd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:23.455287 env[1734]: 2025-11-01 00:41:23.409 [INFO][4479] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.54.5/32] ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Namespace="calico-system" Pod="calico-kube-controllers-7669f6697f-ds4tg" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:23.455287 env[1734]: 2025-11-01 00:41:23.409 [INFO][4479] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3b8ec7aa1cd ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Namespace="calico-system" Pod="calico-kube-controllers-7669f6697f-ds4tg" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:23.455287 env[1734]: 2025-11-01 00:41:23.419 [INFO][4479] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Namespace="calico-system" Pod="calico-kube-controllers-7669f6697f-ds4tg" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:23.455287 env[1734]: 2025-11-01 00:41:23.419 [INFO][4479] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Namespace="calico-system" Pod="calico-kube-controllers-7669f6697f-ds4tg" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0", GenerateName:"calico-kube-controllers-7669f6697f-", Namespace:"calico-system", SelfLink:"", UID:"66ef8aaa-4cbe-4280-98d5-566c4289d009", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7669f6697f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734", Pod:"calico-kube-controllers-7669f6697f-ds4tg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.54.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali3b8ec7aa1cd", MAC:"b6:9f:ef:7a:14:bc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:23.455287 env[1734]: 2025-11-01 00:41:23.443 [INFO][4479] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734" Namespace="calico-system" Pod="calico-kube-controllers-7669f6697f-ds4tg" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:41:23.488298 env[1734]: time="2025-11-01T00:41:23.487969922Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:41:23.488298 env[1734]: time="2025-11-01T00:41:23.488026087Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:41:23.488298 env[1734]: time="2025-11-01T00:41:23.488041036Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:41:23.488754 env[1734]: time="2025-11-01T00:41:23.488624411Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734 pid=4696 runtime=io.containerd.runc.v2 Nov 1 00:41:23.507922 systemd[1]: Started cri-containerd-51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734.scope. Nov 1 00:41:23.551040 systemd-networkd[1462]: cali579b89633e0: Link UP Nov 1 00:41:23.554334 kubelet[2612]: E1101 00:41:23.554192 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:41:23.557588 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali579b89633e0: link becomes ready Nov 1 00:41:23.557035 systemd-networkd[1462]: cali579b89633e0: Gained carrier Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.563000 audit: BPF prog-id=190 op=LOAD Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4696 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653338306134653436353938393733373932346164323161346461 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4696 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653338306134653436353938393733373932346164323161346461 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit: BPF prog-id=191 op=LOAD Nov 1 00:41:23.577000 audit[4704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003a3570 items=0 ppid=4696 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653338306134653436353938393733373932346164323161346461 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.577000 audit: BPF prog-id=192 op=LOAD Nov 1 00:41:23.577000 audit[4704]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003a35b8 items=0 ppid=4696 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653338306134653436353938393733373932346164323161346461 Nov 1 00:41:23.577000 audit: BPF prog-id=192 op=UNLOAD Nov 1 00:41:23.577000 audit: BPF prog-id=191 op=UNLOAD Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { perfmon } for pid=4704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit[4704]: AVC avc: denied { bpf } for pid=4704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.578000 audit: BPF prog-id=193 op=LOAD Nov 1 00:41:23.578000 audit[4704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a39c8 items=0 ppid=4696 pid=4704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653338306134653436353938393733373932346164323161346461 Nov 1 00:41:23.598643 kubelet[2612]: I1101 00:41:23.598573 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-s5tsw" podStartSLOduration=67.595411219 podStartE2EDuration="1m7.595411219s" podCreationTimestamp="2025-11-01 00:40:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:41:23.590979745 +0000 UTC m=+72.769683405" watchObservedRunningTime="2025-11-01 00:41:23.595411219 +0000 UTC m=+72.774114880" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.326 [INFO][4557] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0 coredns-668d6bf9bc- kube-system 6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2 1038 0 2025-11-01 00:40:16 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-20-5 coredns-668d6bf9bc-qbfmr eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali579b89633e0 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Namespace="kube-system" Pod="coredns-668d6bf9bc-qbfmr" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.332 [INFO][4557] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Namespace="kube-system" Pod="coredns-668d6bf9bc-qbfmr" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.464 [INFO][4669] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" HandleID="k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.465 [INFO][4669] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" HandleID="k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccfe0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-20-5", "pod":"coredns-668d6bf9bc-qbfmr", "timestamp":"2025-11-01 00:41:23.464000992 +0000 UTC"}, Hostname:"ip-172-31-20-5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.465 [INFO][4669] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.465 [INFO][4669] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.465 [INFO][4669] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-5' Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.474 [INFO][4669] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.480 [INFO][4669] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.487 [INFO][4669] ipam/ipam.go 511: Trying affinity for 192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.489 [INFO][4669] ipam/ipam.go 158: Attempting to load block cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.493 [INFO][4669] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.493 [INFO][4669] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.54.0/26 handle="k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.496 [INFO][4669] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.506 [INFO][4669] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.54.0/26 handle="k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.528 [INFO][4669] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.54.6/26] block=192.168.54.0/26 handle="k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.528 [INFO][4669] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.54.6/26] handle="k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" host="ip-172-31-20-5" Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.528 [INFO][4669] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:23.608854 env[1734]: 2025-11-01 00:41:23.528 [INFO][4669] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.54.6/26] IPv6=[] ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" HandleID="k8s-pod-network.978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:23.610080 env[1734]: 2025-11-01 00:41:23.533 [INFO][4557] cni-plugin/k8s.go 418: Populated endpoint ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Namespace="kube-system" Pod="coredns-668d6bf9bc-qbfmr" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"", Pod:"coredns-668d6bf9bc-qbfmr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.54.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali579b89633e0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:23.610080 env[1734]: 2025-11-01 00:41:23.533 [INFO][4557] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.54.6/32] ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Namespace="kube-system" Pod="coredns-668d6bf9bc-qbfmr" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:23.610080 env[1734]: 2025-11-01 00:41:23.533 [INFO][4557] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali579b89633e0 ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Namespace="kube-system" Pod="coredns-668d6bf9bc-qbfmr" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:23.610080 env[1734]: 2025-11-01 00:41:23.561 [INFO][4557] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Namespace="kube-system" Pod="coredns-668d6bf9bc-qbfmr" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:23.610080 env[1734]: 2025-11-01 00:41:23.573 [INFO][4557] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Namespace="kube-system" Pod="coredns-668d6bf9bc-qbfmr" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f", Pod:"coredns-668d6bf9bc-qbfmr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.54.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali579b89633e0", MAC:"aa:a5:a6:54:1a:5e", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:23.610080 env[1734]: 2025-11-01 00:41:23.601 [INFO][4557] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f" Namespace="kube-system" Pod="coredns-668d6bf9bc-qbfmr" WorkloadEndpoint="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:41:23.616019 env[1734]: time="2025-11-01T00:41:23.615969824Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:23.618426 env[1734]: time="2025-11-01T00:41:23.618365209Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:41:23.618853 kubelet[2612]: E1101 00:41:23.618779 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:41:23.618975 kubelet[2612]: E1101 00:41:23.618870 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:41:23.619445 env[1734]: time="2025-11-01T00:41:23.619411163Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:41:23.622663 kubelet[2612]: E1101 00:41:23.622566 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-s6lt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-694c7bcdf8-w5cjp_calico-apiserver(c310f163-2203-4d17-8fa6-ed4211a3c699): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:23.623917 kubelet[2612]: E1101 00:41:23.623760 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:41:23.641007 env[1734]: time="2025-11-01T00:41:23.640597157Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:41:23.641298 env[1734]: time="2025-11-01T00:41:23.641256302Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:41:23.641432 env[1734]: time="2025-11-01T00:41:23.641407372Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:41:23.641778 env[1734]: time="2025-11-01T00:41:23.641742038Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f pid=4737 runtime=io.containerd.runc.v2 Nov 1 00:41:23.646000 audit[4730]: NETFILTER_CFG table=filter:113 family=2 entries=48 op=nft_register_chain pid=4730 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:23.646000 audit[4730]: SYSCALL arch=c000003e syscall=46 success=yes exit=23140 a0=3 a1=7ffc665f7240 a2=0 a3=7ffc665f722c items=0 ppid=3988 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.646000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:23.674621 systemd[1]: Started cri-containerd-978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f.scope. Nov 1 00:41:23.714000 audit[4769]: NETFILTER_CFG table=filter:114 family=2 entries=48 op=nft_register_chain pid=4769 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:23.714000 audit[4769]: SYSCALL arch=c000003e syscall=46 success=yes exit=22720 a0=3 a1=7fff605d1ea0 a2=0 a3=7fff605d1e8c items=0 ppid=3988 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.714000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:23.722569 env[1734]: time="2025-11-01T00:41:23.722520005Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7669f6697f-ds4tg,Uid:66ef8aaa-4cbe-4280-98d5-566c4289d009,Namespace:calico-system,Attempt:1,} returns sandbox id \"51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734\"" Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.725000 audit: BPF prog-id=194 op=LOAD Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4737 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937386462303763613236646565306537386166383766313366343665 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4737 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937386462303763613236646565306537386166383766313366343665 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit: BPF prog-id=195 op=LOAD Nov 1 00:41:23.726000 audit[4747]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003dc9d0 items=0 ppid=4737 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937386462303763613236646565306537386166383766313366343665 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit: BPF prog-id=196 op=LOAD Nov 1 00:41:23.726000 audit[4747]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003dca18 items=0 ppid=4737 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937386462303763613236646565306537386166383766313366343665 Nov 1 00:41:23.726000 audit: BPF prog-id=196 op=UNLOAD Nov 1 00:41:23.726000 audit: BPF prog-id=195 op=UNLOAD Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.726000 audit: BPF prog-id=197 op=LOAD Nov 1 00:41:23.726000 audit[4747]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003dce28 items=0 ppid=4737 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937386462303763613236646565306537386166383766313366343665 Nov 1 00:41:23.773881 env[1734]: time="2025-11-01T00:41:23.773838055Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-qbfmr,Uid:6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2,Namespace:kube-system,Attempt:1,} returns sandbox id \"978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f\"" Nov 1 00:41:23.778852 env[1734]: time="2025-11-01T00:41:23.778807541Z" level=info msg="CreateContainer within sandbox \"978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:41:23.780000 audit[4785]: NETFILTER_CFG table=filter:115 family=2 entries=20 op=nft_register_rule pid=4785 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:23.780000 audit[4785]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffea0e16ff0 a2=0 a3=7ffea0e16fdc items=0 ppid=2828 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.780000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:23.784000 audit[4785]: NETFILTER_CFG table=nat:116 family=2 entries=14 op=nft_register_rule pid=4785 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:23.784000 audit[4785]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffea0e16ff0 a2=0 a3=0 items=0 ppid=2828 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.784000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:23.808504 env[1734]: time="2025-11-01T00:41:23.808461338Z" level=info msg="CreateContainer within sandbox \"978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"84fe4d053d26ac6db3a9b8fa0e4f9802d99130d6121ad949dc155bb78a15e1a6\"" Nov 1 00:41:23.809395 env[1734]: time="2025-11-01T00:41:23.809367885Z" level=info msg="StartContainer for \"84fe4d053d26ac6db3a9b8fa0e4f9802d99130d6121ad949dc155bb78a15e1a6\"" Nov 1 00:41:23.832734 systemd[1]: Started cri-containerd-84fe4d053d26ac6db3a9b8fa0e4f9802d99130d6121ad949dc155bb78a15e1a6.scope. Nov 1 00:41:23.835000 audit[4806]: NETFILTER_CFG table=filter:117 family=2 entries=20 op=nft_register_rule pid=4806 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:23.835000 audit[4806]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffdecfea3b0 a2=0 a3=7ffdecfea39c items=0 ppid=2828 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.835000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:23.840000 audit[4806]: NETFILTER_CFG table=nat:118 family=2 entries=14 op=nft_register_rule pid=4806 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:23.840000 audit[4806]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffdecfea3b0 a2=0 a3=0 items=0 ppid=2828 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.840000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.851000 audit: BPF prog-id=198 op=LOAD Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4737 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666534643035336432366163366462336139623866613065346639 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4737 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666534643035336432366163366462336139623866613065346639 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit: BPF prog-id=199 op=LOAD Nov 1 00:41:23.852000 audit[4795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003c6cc0 items=0 ppid=4737 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666534643035336432366163366462336139623866613065346639 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.852000 audit: BPF prog-id=200 op=LOAD Nov 1 00:41:23.852000 audit[4795]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003c6d08 items=0 ppid=4737 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666534643035336432366163366462336139623866613065346639 Nov 1 00:41:23.852000 audit: BPF prog-id=200 op=UNLOAD Nov 1 00:41:23.852000 audit: BPF prog-id=199 op=UNLOAD Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { perfmon } for pid=4795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit[4795]: AVC avc: denied { bpf } for pid=4795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:23.853000 audit: BPF prog-id=201 op=LOAD Nov 1 00:41:23.853000 audit[4795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c7118 items=0 ppid=4737 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:23.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834666534643035336432366163366462336139623866613065346639 Nov 1 00:41:23.875278 env[1734]: time="2025-11-01T00:41:23.875213144Z" level=info msg="StartContainer for \"84fe4d053d26ac6db3a9b8fa0e4f9802d99130d6121ad949dc155bb78a15e1a6\" returns successfully" Nov 1 00:41:23.907549 env[1734]: time="2025-11-01T00:41:23.907497879Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:23.909867 env[1734]: time="2025-11-01T00:41:23.909791864Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:41:23.910081 kubelet[2612]: E1101 00:41:23.910007 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:41:23.910196 kubelet[2612]: E1101 00:41:23.910100 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:41:23.910605 kubelet[2612]: E1101 00:41:23.910348 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xg94p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:23.910960 env[1734]: time="2025-11-01T00:41:23.910879333Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:41:24.051430 env[1734]: time="2025-11-01T00:41:24.048700858Z" level=info msg="StopPodSandbox for \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\"" Nov 1 00:41:24.068221 systemd-networkd[1462]: cali48cf154d9ea: Gained IPv6LL Nov 1 00:41:24.148589 env[1734]: time="2025-11-01T00:41:24.148535056Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:24.151208 env[1734]: time="2025-11-01T00:41:24.151128959Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:41:24.152155 kubelet[2612]: E1101 00:41:24.151527 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:41:24.152155 kubelet[2612]: E1101 00:41:24.151576 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:41:24.152155 kubelet[2612]: E1101 00:41:24.151841 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-l6p6w,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7669f6697f-ds4tg_calico-system(66ef8aaa-4cbe-4280-98d5-566c4289d009): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:24.156492 kubelet[2612]: E1101 00:41:24.155568 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:41:24.157002 env[1734]: time="2025-11-01T00:41:24.156962750Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.165 [INFO][4839] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.166 [INFO][4839] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" iface="eth0" netns="/var/run/netns/cni-e28b0fad-d435-b967-578e-b2c246a21738" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.166 [INFO][4839] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" iface="eth0" netns="/var/run/netns/cni-e28b0fad-d435-b967-578e-b2c246a21738" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.166 [INFO][4839] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" iface="eth0" netns="/var/run/netns/cni-e28b0fad-d435-b967-578e-b2c246a21738" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.167 [INFO][4839] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.167 [INFO][4839] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.195 [INFO][4847] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.195 [INFO][4847] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.195 [INFO][4847] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.202 [WARNING][4847] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.202 [INFO][4847] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.204 [INFO][4847] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:24.209204 env[1734]: 2025-11-01 00:41:24.207 [INFO][4839] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:41:24.214215 systemd[1]: run-netns-cni\x2de28b0fad\x2dd435\x2db967\x2d578e\x2db2c246a21738.mount: Deactivated successfully. Nov 1 00:41:24.215949 env[1734]: time="2025-11-01T00:41:24.215894741Z" level=info msg="TearDown network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\" successfully" Nov 1 00:41:24.215949 env[1734]: time="2025-11-01T00:41:24.215943801Z" level=info msg="StopPodSandbox for \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\" returns successfully" Nov 1 00:41:24.216819 env[1734]: time="2025-11-01T00:41:24.216785426Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694c7bcdf8-kntch,Uid:40f020e9-694f-467c-8633-16e91962974a,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:41:24.324921 systemd-networkd[1462]: cali819024acdca: Gained IPv6LL Nov 1 00:41:24.381659 systemd-networkd[1462]: cali05060a94a97: Link UP Nov 1 00:41:24.385740 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:41:24.385840 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali05060a94a97: link becomes ready Nov 1 00:41:24.386037 systemd-networkd[1462]: cali05060a94a97: Gained carrier Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.290 [INFO][4853] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0 calico-apiserver-694c7bcdf8- calico-apiserver 40f020e9-694f-467c-8633-16e91962974a 1085 0 2025-11-01 00:40:42 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:694c7bcdf8 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-20-5 calico-apiserver-694c7bcdf8-kntch eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali05060a94a97 [] [] }} ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-kntch" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.290 [INFO][4853] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-kntch" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.320 [INFO][4865] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" HandleID="k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.320 [INFO][4865] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" HandleID="k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000250fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-20-5", "pod":"calico-apiserver-694c7bcdf8-kntch", "timestamp":"2025-11-01 00:41:24.320179472 +0000 UTC"}, Hostname:"ip-172-31-20-5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.320 [INFO][4865] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.320 [INFO][4865] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.320 [INFO][4865] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-5' Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.330 [INFO][4865] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.339 [INFO][4865] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.344 [INFO][4865] ipam/ipam.go 511: Trying affinity for 192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.347 [INFO][4865] ipam/ipam.go 158: Attempting to load block cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.350 [INFO][4865] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.350 [INFO][4865] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.54.0/26 handle="k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.352 [INFO][4865] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50 Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.359 [INFO][4865] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.54.0/26 handle="k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.368 [INFO][4865] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.54.7/26] block=192.168.54.0/26 handle="k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.368 [INFO][4865] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.54.7/26] handle="k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" host="ip-172-31-20-5" Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.368 [INFO][4865] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:24.407236 env[1734]: 2025-11-01 00:41:24.368 [INFO][4865] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.54.7/26] IPv6=[] ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" HandleID="k8s-pod-network.66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.408348 env[1734]: 2025-11-01 00:41:24.371 [INFO][4853] cni-plugin/k8s.go 418: Populated endpoint ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-kntch" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0", GenerateName:"calico-apiserver-694c7bcdf8-", Namespace:"calico-apiserver", SelfLink:"", UID:"40f020e9-694f-467c-8633-16e91962974a", ResourceVersion:"1085", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694c7bcdf8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"", Pod:"calico-apiserver-694c7bcdf8-kntch", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.54.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali05060a94a97", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:24.408348 env[1734]: 2025-11-01 00:41:24.371 [INFO][4853] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.54.7/32] ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-kntch" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.408348 env[1734]: 2025-11-01 00:41:24.371 [INFO][4853] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali05060a94a97 ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-kntch" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.408348 env[1734]: 2025-11-01 00:41:24.387 [INFO][4853] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-kntch" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.408348 env[1734]: 2025-11-01 00:41:24.388 [INFO][4853] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-kntch" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0", GenerateName:"calico-apiserver-694c7bcdf8-", Namespace:"calico-apiserver", SelfLink:"", UID:"40f020e9-694f-467c-8633-16e91962974a", ResourceVersion:"1085", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694c7bcdf8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50", Pod:"calico-apiserver-694c7bcdf8-kntch", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.54.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali05060a94a97", MAC:"e6:92:fe:92:6e:9e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:24.408348 env[1734]: 2025-11-01 00:41:24.404 [INFO][4853] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50" Namespace="calico-apiserver" Pod="calico-apiserver-694c7bcdf8-kntch" WorkloadEndpoint="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:41:24.409453 env[1734]: time="2025-11-01T00:41:24.409415042Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:24.412525 env[1734]: time="2025-11-01T00:41:24.412452456Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:41:24.413433 kubelet[2612]: E1101 00:41:24.412898 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:41:24.413433 kubelet[2612]: E1101 00:41:24.412954 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:41:24.413433 kubelet[2612]: E1101 00:41:24.413136 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xg94p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:24.414738 kubelet[2612]: E1101 00:41:24.414550 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:24.430232 env[1734]: time="2025-11-01T00:41:24.430116379Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:41:24.430522 env[1734]: time="2025-11-01T00:41:24.430447352Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:41:24.430707 env[1734]: time="2025-11-01T00:41:24.430678031Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:41:24.431072 env[1734]: time="2025-11-01T00:41:24.431018757Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50 pid=4886 runtime=io.containerd.runc.v2 Nov 1 00:41:24.433000 audit[4893]: NETFILTER_CFG table=filter:119 family=2 entries=57 op=nft_register_chain pid=4893 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:24.433000 audit[4893]: SYSCALL arch=c000003e syscall=46 success=yes exit=27828 a0=3 a1=7fff61f1cd70 a2=0 a3=7fff61f1cd5c items=0 ppid=3988 pid=4893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:24.433000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:24.467814 systemd[1]: Started cri-containerd-66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50.scope. Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.482000 audit: BPF prog-id=202 op=LOAD Nov 1 00:41:24.483000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.483000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4886 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:24.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636666538653438613166363066643562653664313265633863643161 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4886 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:24.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636666538653438613166363066643562653664313265633863643161 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.484000 audit: BPF prog-id=203 op=LOAD Nov 1 00:41:24.484000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000210520 items=0 ppid=4886 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:24.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636666538653438613166363066643562653664313265633863643161 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.485000 audit: BPF prog-id=204 op=LOAD Nov 1 00:41:24.485000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000210568 items=0 ppid=4886 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:24.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636666538653438613166363066643562653664313265633863643161 Nov 1 00:41:24.486000 audit: BPF prog-id=204 op=UNLOAD Nov 1 00:41:24.486000 audit: BPF prog-id=203 op=UNLOAD Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:24.486000 audit: BPF prog-id=205 op=LOAD Nov 1 00:41:24.486000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000210978 items=0 ppid=4886 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:24.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636666538653438613166363066643562653664313265633863643161 Nov 1 00:41:24.516196 systemd-networkd[1462]: cali266f700ed4f: Gained IPv6LL Nov 1 00:41:24.524589 env[1734]: time="2025-11-01T00:41:24.524047592Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694c7bcdf8-kntch,Uid:40f020e9-694f-467c-8633-16e91962974a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50\"" Nov 1 00:41:24.527131 env[1734]: time="2025-11-01T00:41:24.526173544Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:41:24.571017 kubelet[2612]: E1101 00:41:24.568180 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:41:24.571017 kubelet[2612]: E1101 00:41:24.570891 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:41:24.574522 kubelet[2612]: E1101 00:41:24.574469 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:24.596654 kubelet[2612]: I1101 00:41:24.596602 2612 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-qbfmr" podStartSLOduration=68.596562703 podStartE2EDuration="1m8.596562703s" podCreationTimestamp="2025-11-01 00:40:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:41:24.570526769 +0000 UTC m=+73.749230429" watchObservedRunningTime="2025-11-01 00:41:24.596562703 +0000 UTC m=+73.775266363" Nov 1 00:41:24.788093 env[1734]: time="2025-11-01T00:41:24.788016535Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:24.790350 env[1734]: time="2025-11-01T00:41:24.790186678Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:41:24.790529 kubelet[2612]: E1101 00:41:24.790470 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:41:24.790762 kubelet[2612]: E1101 00:41:24.790533 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:41:24.790989 kubelet[2612]: E1101 00:41:24.790937 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-frcq9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-694c7bcdf8-kntch_calico-apiserver(40f020e9-694f-467c-8633-16e91962974a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:24.792398 kubelet[2612]: E1101 00:41:24.792363 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:41:24.836535 systemd-networkd[1462]: cali3b8ec7aa1cd: Gained IPv6LL Nov 1 00:41:24.856000 audit[4923]: NETFILTER_CFG table=filter:120 family=2 entries=20 op=nft_register_rule pid=4923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:24.856000 audit[4923]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc6fde6a20 a2=0 a3=7ffc6fde6a0c items=0 ppid=2828 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:24.856000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:24.860000 audit[4923]: NETFILTER_CFG table=nat:121 family=2 entries=14 op=nft_register_rule pid=4923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:24.860000 audit[4923]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc6fde6a20 a2=0 a3=0 items=0 ppid=2828 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:24.860000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:24.903476 systemd-networkd[1462]: cali579b89633e0: Gained IPv6LL Nov 1 00:41:25.050387 env[1734]: time="2025-11-01T00:41:25.050339501Z" level=info msg="StopPodSandbox for \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\"" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.145 [INFO][4934] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.145 [INFO][4934] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" iface="eth0" netns="/var/run/netns/cni-0378e590-bf60-a8e5-a664-690be208c188" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.146 [INFO][4934] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" iface="eth0" netns="/var/run/netns/cni-0378e590-bf60-a8e5-a664-690be208c188" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.146 [INFO][4934] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" iface="eth0" netns="/var/run/netns/cni-0378e590-bf60-a8e5-a664-690be208c188" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.146 [INFO][4934] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.146 [INFO][4934] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.199 [INFO][4941] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.200 [INFO][4941] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.200 [INFO][4941] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.212 [WARNING][4941] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.212 [INFO][4941] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.214 [INFO][4941] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:25.219488 env[1734]: 2025-11-01 00:41:25.216 [INFO][4934] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:41:25.227434 systemd[1]: run-netns-cni\x2d0378e590\x2dbf60\x2da8e5\x2da664\x2d690be208c188.mount: Deactivated successfully. Nov 1 00:41:25.229292 env[1734]: time="2025-11-01T00:41:25.229245741Z" level=info msg="TearDown network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\" successfully" Nov 1 00:41:25.229292 env[1734]: time="2025-11-01T00:41:25.229286815Z" level=info msg="StopPodSandbox for \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\" returns successfully" Nov 1 00:41:25.230127 env[1734]: time="2025-11-01T00:41:25.230086184Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-vv82h,Uid:9e74237e-e6c1-475d-a5d0-2b21bced39ac,Namespace:calico-system,Attempt:1,}" Nov 1 00:41:25.271000 audit[4654]: AVC avc: denied { getattr } for pid=4654 comm="coredns" path="cgroup:[4026532715]" dev="nsfs" ino=4026532715 scontext=system_u:system_r:svirt_lxc_net_t:s0:c278,c642 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:41:25.272000 audit[4808]: AVC avc: denied { getattr } for pid=4808 comm="coredns" path="cgroup:[4026532730]" dev="nsfs" ino=4026532730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c734 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:41:25.271000 audit[4654]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a798 a2=c000128fa8 a3=0 items=0 ppid=4464 pid=4654 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c278,c642 key=(null) Nov 1 00:41:25.271000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:41:25.272000 audit[4808]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c00044a9f8 a3=0 items=0 ppid=4737 pid=4808 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c734 key=(null) Nov 1 00:41:25.272000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:41:25.489697 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2abe8ee139a: link becomes ready Nov 1 00:41:25.489199 systemd-networkd[1462]: cali2abe8ee139a: Link UP Nov 1 00:41:25.489391 systemd-networkd[1462]: cali2abe8ee139a: Gained carrier Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.326 [INFO][4947] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0 goldmane-666569f655- calico-system 9e74237e-e6c1-475d-a5d0-2b21bced39ac 1125 0 2025-11-01 00:40:46 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-20-5 goldmane-666569f655-vv82h eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali2abe8ee139a [] [] }} ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Namespace="calico-system" Pod="goldmane-666569f655-vv82h" WorkloadEndpoint="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.327 [INFO][4947] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Namespace="calico-system" Pod="goldmane-666569f655-vv82h" WorkloadEndpoint="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.383 [INFO][4961] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" HandleID="k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.384 [INFO][4961] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" HandleID="k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-20-5", "pod":"goldmane-666569f655-vv82h", "timestamp":"2025-11-01 00:41:25.383921352 +0000 UTC"}, Hostname:"ip-172-31-20-5", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.384 [INFO][4961] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.384 [INFO][4961] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.384 [INFO][4961] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-5' Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.391 [INFO][4961] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.398 [INFO][4961] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.404 [INFO][4961] ipam/ipam.go 511: Trying affinity for 192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.407 [INFO][4961] ipam/ipam.go 158: Attempting to load block cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.411 [INFO][4961] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.54.0/26 host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.411 [INFO][4961] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.54.0/26 handle="k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.415 [INFO][4961] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.429 [INFO][4961] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.54.0/26 handle="k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.476 [INFO][4961] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.54.8/26] block=192.168.54.0/26 handle="k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.476 [INFO][4961] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.54.8/26] handle="k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" host="ip-172-31-20-5" Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.476 [INFO][4961] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:41:25.528473 env[1734]: 2025-11-01 00:41:25.476 [INFO][4961] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.54.8/26] IPv6=[] ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" HandleID="k8s-pod-network.100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.529518 env[1734]: 2025-11-01 00:41:25.484 [INFO][4947] cni-plugin/k8s.go 418: Populated endpoint ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Namespace="calico-system" Pod="goldmane-666569f655-vv82h" WorkloadEndpoint="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"9e74237e-e6c1-475d-a5d0-2b21bced39ac", ResourceVersion:"1125", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"", Pod:"goldmane-666569f655-vv82h", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.54.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali2abe8ee139a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:25.529518 env[1734]: 2025-11-01 00:41:25.484 [INFO][4947] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.54.8/32] ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Namespace="calico-system" Pod="goldmane-666569f655-vv82h" WorkloadEndpoint="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.529518 env[1734]: 2025-11-01 00:41:25.484 [INFO][4947] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2abe8ee139a ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Namespace="calico-system" Pod="goldmane-666569f655-vv82h" WorkloadEndpoint="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.529518 env[1734]: 2025-11-01 00:41:25.491 [INFO][4947] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Namespace="calico-system" Pod="goldmane-666569f655-vv82h" WorkloadEndpoint="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.529518 env[1734]: 2025-11-01 00:41:25.492 [INFO][4947] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Namespace="calico-system" Pod="goldmane-666569f655-vv82h" WorkloadEndpoint="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"9e74237e-e6c1-475d-a5d0-2b21bced39ac", ResourceVersion:"1125", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e", Pod:"goldmane-666569f655-vv82h", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.54.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali2abe8ee139a", MAC:"92:9f:2d:c5:eb:a8", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:41:25.529518 env[1734]: 2025-11-01 00:41:25.525 [INFO][4947] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e" Namespace="calico-system" Pod="goldmane-666569f655-vv82h" WorkloadEndpoint="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:41:25.549360 env[1734]: time="2025-11-01T00:41:25.549271300Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:41:25.549575 env[1734]: time="2025-11-01T00:41:25.549546019Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:41:25.549703 env[1734]: time="2025-11-01T00:41:25.549680570Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:41:25.550038 env[1734]: time="2025-11-01T00:41:25.550001150Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e pid=4980 runtime=io.containerd.runc.v2 Nov 1 00:41:25.571274 kubelet[2612]: E1101 00:41:25.571235 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:41:25.572084 kubelet[2612]: E1101 00:41:25.572035 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:41:25.580233 systemd[1]: Started cri-containerd-100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e.scope. Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.656000 audit: BPF prog-id=206 op=LOAD Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4980 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:25.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130306139323830303164353664326365633366666661393838336636 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4980 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:25.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130306139323830303164353664326365633366666661393838336636 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit: BPF prog-id=207 op=LOAD Nov 1 00:41:25.660000 audit[4990]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000199210 items=0 ppid=4980 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:25.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130306139323830303164353664326365633366666661393838336636 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.660000 audit: BPF prog-id=208 op=LOAD Nov 1 00:41:25.660000 audit[4990]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000199258 items=0 ppid=4980 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:25.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130306139323830303164353664326365633366666661393838336636 Nov 1 00:41:25.660000 audit: BPF prog-id=208 op=UNLOAD Nov 1 00:41:25.660000 audit: BPF prog-id=207 op=UNLOAD Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:41:25.661000 audit: BPF prog-id=209 op=LOAD Nov 1 00:41:25.661000 audit[4990]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000199668 items=0 ppid=4980 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:25.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130306139323830303164353664326365633366666661393838336636 Nov 1 00:41:25.725777 env[1734]: time="2025-11-01T00:41:25.725724006Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-vv82h,Uid:9e74237e-e6c1-475d-a5d0-2b21bced39ac,Namespace:calico-system,Attempt:1,} returns sandbox id \"100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e\"" Nov 1 00:41:25.727832 env[1734]: time="2025-11-01T00:41:25.727795215Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:41:25.774000 audit[5017]: NETFILTER_CFG table=filter:122 family=2 entries=74 op=nft_register_chain pid=5017 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:41:25.774000 audit[5017]: SYSCALL arch=c000003e syscall=46 success=yes exit=35160 a0=3 a1=7ffc16b71250 a2=0 a3=7ffc16b7123c items=0 ppid=3988 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:25.774000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:41:25.860211 systemd-networkd[1462]: cali05060a94a97: Gained IPv6LL Nov 1 00:41:25.880000 audit[5019]: NETFILTER_CFG table=filter:123 family=2 entries=20 op=nft_register_rule pid=5019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:25.880000 audit[5019]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc2523d420 a2=0 a3=7ffc2523d40c items=0 ppid=2828 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:25.880000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:25.889000 audit[5019]: NETFILTER_CFG table=nat:124 family=2 entries=14 op=nft_register_rule pid=5019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:25.889000 audit[5019]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc2523d420 a2=0 a3=0 items=0 ppid=2828 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:25.889000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:25.903154 systemd[1]: run-containerd-runc-k8s.io-100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e-runc.Fn4Lcz.mount: Deactivated successfully. Nov 1 00:41:25.974144 env[1734]: time="2025-11-01T00:41:25.974087651Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:25.976042 env[1734]: time="2025-11-01T00:41:25.975966999Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:41:25.976473 kubelet[2612]: E1101 00:41:25.976430 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:41:25.976635 kubelet[2612]: E1101 00:41:25.976616 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:41:25.977857 kubelet[2612]: E1101 00:41:25.977785 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xtpbb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-vv82h_calico-system(9e74237e-e6c1-475d-a5d0-2b21bced39ac): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:25.979320 kubelet[2612]: E1101 00:41:25.979279 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:41:26.573137 kubelet[2612]: E1101 00:41:26.573099 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:41:26.906000 audit[5028]: NETFILTER_CFG table=filter:125 family=2 entries=17 op=nft_register_rule pid=5028 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:26.908968 kernel: kauditd_printk_skb: 624 callbacks suppressed Nov 1 00:41:26.909165 kernel: audit: type=1325 audit(1761957686.906:1260): table=filter:125 family=2 entries=17 op=nft_register_rule pid=5028 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:26.906000 audit[5028]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd6b0ace30 a2=0 a3=7ffd6b0ace1c items=0 ppid=2828 pid=5028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:26.917319 kernel: audit: type=1300 audit(1761957686.906:1260): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd6b0ace30 a2=0 a3=7ffd6b0ace1c items=0 ppid=2828 pid=5028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:26.906000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:26.919000 audit[5028]: NETFILTER_CFG table=nat:126 family=2 entries=35 op=nft_register_chain pid=5028 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:26.924904 kernel: audit: type=1327 audit(1761957686.906:1260): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:26.925046 kernel: audit: type=1325 audit(1761957686.919:1261): table=nat:126 family=2 entries=35 op=nft_register_chain pid=5028 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:26.919000 audit[5028]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd6b0ace30 a2=0 a3=7ffd6b0ace1c items=0 ppid=2828 pid=5028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:26.919000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:26.933181 kernel: audit: type=1300 audit(1761957686.919:1261): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd6b0ace30 a2=0 a3=7ffd6b0ace1c items=0 ppid=2828 pid=5028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:26.933286 kernel: audit: type=1327 audit(1761957686.919:1261): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:26.950725 systemd-networkd[1462]: cali2abe8ee139a: Gained IPv6LL Nov 1 00:41:27.586248 kubelet[2612]: E1101 00:41:27.586208 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:41:27.679181 systemd[1]: Started sshd@8-172.31.20.5:22-147.75.109.163:43690.service. Nov 1 00:41:27.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.5:22-147.75.109.163:43690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:27.685071 kernel: audit: type=1130 audit(1761957687.679:1262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.5:22-147.75.109.163:43690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:27.899000 audit[5036]: USER_ACCT pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:27.911045 kernel: audit: type=1101 audit(1761957687.899:1263): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:27.911187 kernel: audit: type=1103 audit(1761957687.904:1264): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:27.904000 audit[5036]: CRED_ACQ pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:27.911357 sshd[5036]: Accepted publickey for core from 147.75.109.163 port 43690 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:27.911953 sshd[5036]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:27.905000 audit[5036]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0ba45630 a2=3 a3=0 items=0 ppid=1 pid=5036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:27.905000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:27.915116 kernel: audit: type=1006 audit(1761957687.905:1265): pid=5036 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Nov 1 00:41:27.921307 systemd[1]: Started session-9.scope. Nov 1 00:41:27.921825 systemd-logind[1723]: New session 9 of user core. Nov 1 00:41:27.927000 audit[5036]: USER_START pid=5036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:27.929000 audit[5038]: CRED_ACQ pid=5038 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:28.399151 sshd[5036]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:28.400000 audit[5036]: USER_END pid=5036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:28.400000 audit[5036]: CRED_DISP pid=5036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:28.403520 systemd[1]: sshd@8-172.31.20.5:22-147.75.109.163:43690.service: Deactivated successfully. Nov 1 00:41:28.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.5:22-147.75.109.163:43690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:28.404595 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:41:28.405536 systemd-logind[1723]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:41:28.406846 systemd-logind[1723]: Removed session 9. Nov 1 00:41:33.424317 systemd[1]: Started sshd@9-172.31.20.5:22-147.75.109.163:57716.service. Nov 1 00:41:33.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.5:22-147.75.109.163:57716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:33.425886 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:41:33.425986 kernel: audit: type=1130 audit(1761957693.423:1271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.5:22-147.75.109.163:57716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:33.592000 audit[5051]: USER_ACCT pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.593890 sshd[5051]: Accepted publickey for core from 147.75.109.163 port 57716 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:33.603997 kernel: audit: type=1101 audit(1761957693.592:1272): pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.604161 kernel: audit: type=1103 audit(1761957693.598:1273): pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.604470 kernel: audit: type=1006 audit(1761957693.598:1274): pid=5051 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:41:33.598000 audit[5051]: CRED_ACQ pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.599948 sshd[5051]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:33.598000 audit[5051]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9514dc70 a2=3 a3=0 items=0 ppid=1 pid=5051 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:33.621133 kernel: audit: type=1300 audit(1761957693.598:1274): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9514dc70 a2=3 a3=0 items=0 ppid=1 pid=5051 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:33.621258 kernel: audit: type=1327 audit(1761957693.598:1274): proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:33.598000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:33.621095 systemd[1]: Started session-10.scope. Nov 1 00:41:33.621755 systemd-logind[1723]: New session 10 of user core. Nov 1 00:41:33.627000 audit[5051]: USER_START pid=5051 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.631000 audit[5053]: CRED_ACQ pid=5053 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.643137 kernel: audit: type=1105 audit(1761957693.627:1275): pid=5051 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.643266 kernel: audit: type=1103 audit(1761957693.631:1276): pid=5053 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.855702 sshd[5051]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:33.856000 audit[5051]: USER_END pid=5051 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.858000 audit[5051]: CRED_DISP pid=5051 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.868992 systemd[1]: sshd@9-172.31.20.5:22-147.75.109.163:57716.service: Deactivated successfully. Nov 1 00:41:33.870130 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:41:33.873128 systemd-logind[1723]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:41:33.874644 systemd-logind[1723]: Removed session 10. Nov 1 00:41:33.875638 kernel: audit: type=1106 audit(1761957693.856:1277): pid=5051 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.875717 kernel: audit: type=1104 audit(1761957693.858:1278): pid=5051 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:33.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.5:22-147.75.109.163:57716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:33.884438 systemd[1]: Started sshd@10-172.31.20.5:22-147.75.109.163:57728.service. Nov 1 00:41:33.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.5:22-147.75.109.163:57728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:34.053000 audit[5064]: USER_ACCT pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.055323 sshd[5064]: Accepted publickey for core from 147.75.109.163 port 57728 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:34.055000 audit[5064]: CRED_ACQ pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.055000 audit[5064]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6d0e2f40 a2=3 a3=0 items=0 ppid=1 pid=5064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:34.055000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:34.057603 sshd[5064]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:34.064477 systemd[1]: Started session-11.scope. Nov 1 00:41:34.065549 systemd-logind[1723]: New session 11 of user core. Nov 1 00:41:34.092000 audit[5064]: USER_START pid=5064 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.100000 audit[5066]: CRED_ACQ pid=5066 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.400445 sshd[5064]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:34.402000 audit[5064]: USER_END pid=5064 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.402000 audit[5064]: CRED_DISP pid=5064 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.5:22-147.75.109.163:57728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:34.406024 systemd[1]: sshd@10-172.31.20.5:22-147.75.109.163:57728.service: Deactivated successfully. Nov 1 00:41:34.407293 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:41:34.408355 systemd-logind[1723]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:41:34.409438 systemd-logind[1723]: Removed session 11. Nov 1 00:41:34.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.20.5:22-147.75.109.163:57732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:34.428017 systemd[1]: Started sshd@11-172.31.20.5:22-147.75.109.163:57732.service. Nov 1 00:41:34.598000 audit[5075]: USER_ACCT pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.599392 sshd[5075]: Accepted publickey for core from 147.75.109.163 port 57732 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:34.599000 audit[5075]: CRED_ACQ pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.599000 audit[5075]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1cb2b170 a2=3 a3=0 items=0 ppid=1 pid=5075 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:34.599000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:34.601319 sshd[5075]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:34.606605 systemd-logind[1723]: New session 12 of user core. Nov 1 00:41:34.607347 systemd[1]: Started session-12.scope. Nov 1 00:41:34.613000 audit[5075]: USER_START pid=5075 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.615000 audit[5077]: CRED_ACQ pid=5077 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.833106 sshd[5075]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:34.834000 audit[5075]: USER_END pid=5075 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.834000 audit[5075]: CRED_DISP pid=5075 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:34.839503 systemd[1]: sshd@11-172.31.20.5:22-147.75.109.163:57732.service: Deactivated successfully. Nov 1 00:41:34.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.20.5:22-147.75.109.163:57732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:34.840482 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:41:34.841799 systemd-logind[1723]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:41:34.843501 systemd-logind[1723]: Removed session 12. Nov 1 00:41:35.650000 audit[5086]: NETFILTER_CFG table=filter:127 family=2 entries=14 op=nft_register_rule pid=5086 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:35.650000 audit[5086]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffe50e9070 a2=0 a3=7fffe50e905c items=0 ppid=2828 pid=5086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:35.650000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:35.672000 audit[5086]: NETFILTER_CFG table=nat:128 family=2 entries=56 op=nft_register_chain pid=5086 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:35.672000 audit[5086]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7fffe50e9070 a2=0 a3=7fffe50e905c items=0 ppid=2828 pid=5086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:35.672000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:36.048474 env[1734]: time="2025-11-01T00:41:36.048276643Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:41:36.294939 env[1734]: time="2025-11-01T00:41:36.294884358Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:36.297229 env[1734]: time="2025-11-01T00:41:36.297101386Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:41:36.297395 kubelet[2612]: E1101 00:41:36.297355 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:41:36.297736 kubelet[2612]: E1101 00:41:36.297407 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:41:36.297736 kubelet[2612]: E1101 00:41:36.297618 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-s6lt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-694c7bcdf8-w5cjp_calico-apiserver(c310f163-2203-4d17-8fa6-ed4211a3c699): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:36.298433 env[1734]: time="2025-11-01T00:41:36.298358212Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:41:36.298895 kubelet[2612]: E1101 00:41:36.298712 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:41:36.541821 env[1734]: time="2025-11-01T00:41:36.541731050Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:36.543995 env[1734]: time="2025-11-01T00:41:36.543924890Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:41:36.544409 kubelet[2612]: E1101 00:41:36.544340 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:41:36.544572 kubelet[2612]: E1101 00:41:36.544544 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:41:36.544783 kubelet[2612]: E1101 00:41:36.544721 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-l6p6w,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7669f6697f-ds4tg_calico-system(66ef8aaa-4cbe-4280-98d5-566c4289d009): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:36.545967 kubelet[2612]: E1101 00:41:36.545910 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:41:37.049633 env[1734]: time="2025-11-01T00:41:37.048373428Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:41:37.287943 env[1734]: time="2025-11-01T00:41:37.287869103Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:37.290444 env[1734]: time="2025-11-01T00:41:37.290349425Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:41:37.290680 kubelet[2612]: E1101 00:41:37.290633 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:41:37.290814 kubelet[2612]: E1101 00:41:37.290694 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:41:37.290902 kubelet[2612]: E1101 00:41:37.290851 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xg94p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:37.294033 env[1734]: time="2025-11-01T00:41:37.293739515Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:41:37.532834 env[1734]: time="2025-11-01T00:41:37.532780512Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:37.535512 env[1734]: time="2025-11-01T00:41:37.535250891Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:41:37.535903 kubelet[2612]: E1101 00:41:37.535847 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:41:37.536343 kubelet[2612]: E1101 00:41:37.535908 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:41:37.536343 kubelet[2612]: E1101 00:41:37.536086 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xg94p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:37.538184 kubelet[2612]: E1101 00:41:37.538031 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:38.048711 env[1734]: time="2025-11-01T00:41:38.048664021Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:41:38.288568 env[1734]: time="2025-11-01T00:41:38.288512679Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:38.290639 env[1734]: time="2025-11-01T00:41:38.290572509Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:41:38.291272 kubelet[2612]: E1101 00:41:38.291125 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:41:38.291670 kubelet[2612]: E1101 00:41:38.291621 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:41:38.291789 kubelet[2612]: E1101 00:41:38.291754 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:40c8e9570f674faf992af5067a87a776,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-9q4qn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f4f4f9df6-7k8lt_calico-system(6fd5df7e-93f8-425a-9311-2ce972e2adf0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:38.294828 env[1734]: time="2025-11-01T00:41:38.294529446Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:41:38.539684 env[1734]: time="2025-11-01T00:41:38.539605426Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:38.542697 env[1734]: time="2025-11-01T00:41:38.541990488Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:41:38.542862 kubelet[2612]: E1101 00:41:38.542480 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:41:38.542862 kubelet[2612]: E1101 00:41:38.542525 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:41:38.542862 kubelet[2612]: E1101 00:41:38.542645 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9q4qn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f4f4f9df6-7k8lt_calico-system(6fd5df7e-93f8-425a-9311-2ce972e2adf0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:38.544179 kubelet[2612]: E1101 00:41:38.544136 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:41:39.051092 env[1734]: time="2025-11-01T00:41:39.050862094Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:41:39.290542 env[1734]: time="2025-11-01T00:41:39.290488754Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:39.292668 env[1734]: time="2025-11-01T00:41:39.292501872Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:41:39.293267 kubelet[2612]: E1101 00:41:39.293016 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:41:39.293267 kubelet[2612]: E1101 00:41:39.293089 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:41:39.293408 kubelet[2612]: E1101 00:41:39.293268 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-frcq9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-694c7bcdf8-kntch_calico-apiserver(40f020e9-694f-467c-8633-16e91962974a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:39.294963 kubelet[2612]: E1101 00:41:39.294926 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:41:39.872791 kernel: kauditd_printk_skb: 29 callbacks suppressed Nov 1 00:41:39.872905 kernel: audit: type=1130 audit(1761957699.860:1300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.5:22-147.75.109.163:57746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:39.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.5:22-147.75.109.163:57746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:39.861512 systemd[1]: Started sshd@12-172.31.20.5:22-147.75.109.163:57746.service. Nov 1 00:41:40.029000 audit[5102]: USER_ACCT pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.040447 sshd[5102]: Accepted publickey for core from 147.75.109.163 port 57746 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:40.042762 kernel: audit: type=1101 audit(1761957700.029:1301): pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.041000 sshd[5102]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:40.039000 audit[5102]: CRED_ACQ pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.052692 kernel: audit: type=1103 audit(1761957700.039:1302): pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.054563 systemd[1]: Started session-13.scope. Nov 1 00:41:40.056521 env[1734]: time="2025-11-01T00:41:40.053514571Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:41:40.058030 systemd-logind[1723]: New session 13 of user core. Nov 1 00:41:40.060176 kernel: audit: type=1006 audit(1761957700.039:1303): pid=5102 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Nov 1 00:41:40.039000 audit[5102]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1ca698f0 a2=3 a3=0 items=0 ppid=1 pid=5102 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:40.072424 kernel: audit: type=1300 audit(1761957700.039:1303): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1ca698f0 a2=3 a3=0 items=0 ppid=1 pid=5102 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:40.072558 kernel: audit: type=1327 audit(1761957700.039:1303): proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:40.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:40.070000 audit[5102]: USER_START pid=5102 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.075000 audit[5104]: CRED_ACQ pid=5104 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.091472 kernel: audit: type=1105 audit(1761957700.070:1304): pid=5102 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.091717 kernel: audit: type=1103 audit(1761957700.075:1305): pid=5104 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.268340 sshd[5102]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:40.270000 audit[5102]: USER_END pid=5102 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.273871 systemd[1]: sshd@12-172.31.20.5:22-147.75.109.163:57746.service: Deactivated successfully. Nov 1 00:41:40.275103 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:41:40.280142 systemd-logind[1723]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:41:40.281600 systemd-logind[1723]: Removed session 13. Nov 1 00:41:40.282215 kernel: audit: type=1106 audit(1761957700.270:1306): pid=5102 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.270000 audit[5102]: CRED_DISP pid=5102 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.5:22-147.75.109.163:57746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:40.289141 kernel: audit: type=1104 audit(1761957700.270:1307): pid=5102 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:40.332019 env[1734]: time="2025-11-01T00:41:40.331685786Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:41:40.334438 env[1734]: time="2025-11-01T00:41:40.334362624Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:41:40.334768 kubelet[2612]: E1101 00:41:40.334720 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:41:40.335226 kubelet[2612]: E1101 00:41:40.334779 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:41:40.335226 kubelet[2612]: E1101 00:41:40.334976 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xtpbb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-vv82h_calico-system(9e74237e-e6c1-475d-a5d0-2b21bced39ac): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:41:40.336653 kubelet[2612]: E1101 00:41:40.336608 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:41:45.296155 systemd[1]: Started sshd@13-172.31.20.5:22-147.75.109.163:50338.service. Nov 1 00:41:45.302163 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:41:45.302293 kernel: audit: type=1130 audit(1761957705.296:1309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.5:22-147.75.109.163:50338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:45.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.5:22-147.75.109.163:50338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:45.472000 audit[5114]: USER_ACCT pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.483499 sshd[5114]: Accepted publickey for core from 147.75.109.163 port 50338 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:45.484069 kernel: audit: type=1101 audit(1761957705.472:1310): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.484340 sshd[5114]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:45.482000 audit[5114]: CRED_ACQ pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.495171 kernel: audit: type=1103 audit(1761957705.482:1311): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.505776 kernel: audit: type=1006 audit(1761957705.482:1312): pid=5114 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Nov 1 00:41:45.505196 systemd[1]: Started session-14.scope. Nov 1 00:41:45.482000 audit[5114]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeaed22c70 a2=3 a3=0 items=0 ppid=1 pid=5114 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:45.534124 kernel: audit: type=1300 audit(1761957705.482:1312): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeaed22c70 a2=3 a3=0 items=0 ppid=1 pid=5114 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:45.535095 kernel: audit: type=1327 audit(1761957705.482:1312): proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:45.482000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:45.517440 systemd-logind[1723]: New session 14 of user core. Nov 1 00:41:45.540709 systemd[1]: run-containerd-runc-k8s.io-1a74e3644ef288f77ef71a21433c64794d9c8ce59d93179ce43cdfd02e91fd32-runc.1oyj1l.mount: Deactivated successfully. Nov 1 00:41:45.550000 audit[5114]: USER_START pid=5114 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.564078 kernel: audit: type=1105 audit(1761957705.550:1313): pid=5114 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.566000 audit[5127]: CRED_ACQ pid=5127 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.574090 kernel: audit: type=1103 audit(1761957705.566:1314): pid=5127 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.816868 sshd[5114]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:45.819000 audit[5114]: USER_END pid=5114 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.822911 systemd[1]: sshd@13-172.31.20.5:22-147.75.109.163:50338.service: Deactivated successfully. Nov 1 00:41:45.824006 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:41:45.830085 kernel: audit: type=1106 audit(1761957705.819:1315): pid=5114 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.819000 audit[5114]: CRED_DISP pid=5114 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:45.830791 systemd-logind[1723]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:41:45.834108 systemd-logind[1723]: Removed session 14. Nov 1 00:41:45.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.5:22-147.75.109.163:50338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:45.839085 kernel: audit: type=1104 audit(1761957705.819:1316): pid=5114 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:50.049668 kubelet[2612]: E1101 00:41:50.049623 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:41:50.050272 kubelet[2612]: E1101 00:41:50.049710 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:41:50.050272 kubelet[2612]: E1101 00:41:50.049763 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:41:50.051019 kubelet[2612]: E1101 00:41:50.050977 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:41:50.843957 systemd[1]: Started sshd@14-172.31.20.5:22-147.75.109.163:40406.service. Nov 1 00:41:50.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.5:22-147.75.109.163:40406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:50.846637 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:41:50.846761 kernel: audit: type=1130 audit(1761957710.843:1318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.5:22-147.75.109.163:40406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:51.049971 kubelet[2612]: E1101 00:41:51.049884 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:41:51.051552 kubelet[2612]: E1101 00:41:51.051501 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:41:51.077000 audit[5152]: USER_ACCT pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.080523 sshd[5152]: Accepted publickey for core from 147.75.109.163 port 40406 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:51.089082 kernel: audit: type=1101 audit(1761957711.077:1319): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.091605 sshd[5152]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:51.087000 audit[5152]: CRED_ACQ pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.104499 kernel: audit: type=1103 audit(1761957711.087:1320): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.113007 systemd-logind[1723]: New session 15 of user core. Nov 1 00:41:51.114090 systemd[1]: Started session-15.scope. Nov 1 00:41:51.124094 kernel: audit: type=1006 audit(1761957711.087:1321): pid=5152 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:41:51.087000 audit[5152]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5346adf0 a2=3 a3=0 items=0 ppid=1 pid=5152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:51.142072 kernel: audit: type=1300 audit(1761957711.087:1321): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5346adf0 a2=3 a3=0 items=0 ppid=1 pid=5152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:51.087000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:51.148123 kernel: audit: type=1327 audit(1761957711.087:1321): proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:51.148248 kernel: audit: type=1105 audit(1761957711.124:1322): pid=5152 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.124000 audit[5152]: USER_START pid=5152 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.126000 audit[5154]: CRED_ACQ pid=5154 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.170122 kernel: audit: type=1103 audit(1761957711.126:1323): pid=5154 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.490774 sshd[5152]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:51.491000 audit[5152]: USER_END pid=5152 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.495254 systemd[1]: sshd@14-172.31.20.5:22-147.75.109.163:40406.service: Deactivated successfully. Nov 1 00:41:51.496366 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:41:51.498721 systemd-logind[1723]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:41:51.499870 systemd-logind[1723]: Removed session 15. Nov 1 00:41:51.492000 audit[5152]: CRED_DISP pid=5152 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.514572 kernel: audit: type=1106 audit(1761957711.491:1324): pid=5152 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.514715 kernel: audit: type=1104 audit(1761957711.492:1325): pid=5152 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:51.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.5:22-147.75.109.163:40406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:56.517441 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:41:56.517568 kernel: audit: type=1130 audit(1761957716.514:1327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.5:22-147.75.109.163:40416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:56.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.5:22-147.75.109.163:40416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:56.515032 systemd[1]: Started sshd@15-172.31.20.5:22-147.75.109.163:40416.service. Nov 1 00:41:56.683000 audit[5165]: USER_ACCT pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.686234 sshd[5165]: Accepted publickey for core from 147.75.109.163 port 40416 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:56.696112 kernel: audit: type=1101 audit(1761957716.683:1328): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.695000 audit[5165]: CRED_ACQ pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.697757 sshd[5165]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:56.711965 kernel: audit: type=1103 audit(1761957716.695:1329): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.712192 kernel: audit: type=1006 audit(1761957716.695:1330): pid=5165 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:41:56.712237 kernel: audit: type=1300 audit(1761957716.695:1330): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd371efe60 a2=3 a3=0 items=0 ppid=1 pid=5165 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:56.695000 audit[5165]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd371efe60 a2=3 a3=0 items=0 ppid=1 pid=5165 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:56.714165 systemd[1]: Started session-16.scope. Nov 1 00:41:56.716455 systemd-logind[1723]: New session 16 of user core. Nov 1 00:41:56.695000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:56.727000 audit[5165]: USER_START pid=5165 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.744263 kernel: audit: type=1327 audit(1761957716.695:1330): proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:56.744390 kernel: audit: type=1105 audit(1761957716.727:1331): pid=5165 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.729000 audit[5167]: CRED_ACQ pid=5167 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.752635 kernel: audit: type=1103 audit(1761957716.729:1332): pid=5167 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.980622 sshd[5165]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:56.981000 audit[5165]: USER_END pid=5165 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.984866 systemd[1]: sshd@15-172.31.20.5:22-147.75.109.163:40416.service: Deactivated successfully. Nov 1 00:41:56.987194 systemd-logind[1723]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:41:56.995646 kernel: audit: type=1106 audit(1761957716.981:1333): pid=5165 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.995772 kernel: audit: type=1104 audit(1761957716.981:1334): pid=5165 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.981000 audit[5165]: CRED_DISP pid=5165 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:56.995134 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:41:56.997153 systemd-logind[1723]: Removed session 16. Nov 1 00:41:56.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.5:22-147.75.109.163:40416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:57.011036 systemd[1]: Started sshd@16-172.31.20.5:22-147.75.109.163:40430.service. Nov 1 00:41:57.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.5:22-147.75.109.163:40430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:57.178000 audit[5177]: USER_ACCT pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:57.179835 sshd[5177]: Accepted publickey for core from 147.75.109.163 port 40430 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:57.180000 audit[5177]: CRED_ACQ pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:57.180000 audit[5177]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb393fef0 a2=3 a3=0 items=0 ppid=1 pid=5177 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:57.180000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:57.182538 sshd[5177]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:57.190775 systemd-logind[1723]: New session 17 of user core. Nov 1 00:41:57.191627 systemd[1]: Started session-17.scope. Nov 1 00:41:57.197000 audit[5177]: USER_START pid=5177 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:57.199000 audit[5179]: CRED_ACQ pid=5179 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:57.950246 sshd[5177]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:57.952000 audit[5177]: USER_END pid=5177 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:57.952000 audit[5177]: CRED_DISP pid=5177 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:57.955429 systemd[1]: sshd@16-172.31.20.5:22-147.75.109.163:40430.service: Deactivated successfully. Nov 1 00:41:57.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.5:22-147.75.109.163:40430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:57.957708 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:41:57.958894 systemd-logind[1723]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:41:57.960305 systemd-logind[1723]: Removed session 17. Nov 1 00:41:57.978612 systemd[1]: Started sshd@17-172.31.20.5:22-147.75.109.163:40446.service. Nov 1 00:41:57.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.5:22-147.75.109.163:40446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:58.176800 sshd[5193]: Accepted publickey for core from 147.75.109.163 port 40446 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:58.177566 sshd[5193]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:58.174000 audit[5193]: USER_ACCT pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:58.175000 audit[5193]: CRED_ACQ pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:58.176000 audit[5193]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff75bfc0d0 a2=3 a3=0 items=0 ppid=1 pid=5193 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:58.176000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:58.184537 systemd-logind[1723]: New session 18 of user core. Nov 1 00:41:58.186369 systemd[1]: Started session-18.scope. Nov 1 00:41:58.192000 audit[5193]: USER_START pid=5193 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:58.194000 audit[5195]: CRED_ACQ pid=5195 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:59.370000 audit[5205]: NETFILTER_CFG table=filter:129 family=2 entries=26 op=nft_register_rule pid=5205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:59.370000 audit[5205]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffe93c8d740 a2=0 a3=7ffe93c8d72c items=0 ppid=2828 pid=5205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:59.370000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:59.376000 audit[5205]: NETFILTER_CFG table=nat:130 family=2 entries=20 op=nft_register_rule pid=5205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:59.376000 audit[5205]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe93c8d740 a2=0 a3=0 items=0 ppid=2828 pid=5205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:59.376000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:59.392510 sshd[5193]: pam_unix(sshd:session): session closed for user core Nov 1 00:41:59.396000 audit[5193]: USER_END pid=5193 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:59.397000 audit[5193]: CRED_DISP pid=5193 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:59.400199 systemd[1]: sshd@17-172.31.20.5:22-147.75.109.163:40446.service: Deactivated successfully. Nov 1 00:41:59.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.5:22-147.75.109.163:40446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:59.401946 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:41:59.403386 systemd-logind[1723]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:41:59.405181 systemd-logind[1723]: Removed session 18. Nov 1 00:41:59.417712 systemd[1]: Started sshd@18-172.31.20.5:22-147.75.109.163:40454.service. Nov 1 00:41:59.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.20.5:22-147.75.109.163:40454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:59.444000 audit[5210]: NETFILTER_CFG table=filter:131 family=2 entries=38 op=nft_register_rule pid=5210 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:59.444000 audit[5210]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffc791c1620 a2=0 a3=7ffc791c160c items=0 ppid=2828 pid=5210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:59.444000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:59.451000 audit[5210]: NETFILTER_CFG table=nat:132 family=2 entries=20 op=nft_register_rule pid=5210 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:41:59.451000 audit[5210]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc791c1620 a2=0 a3=0 items=0 ppid=2828 pid=5210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:59.451000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:41:59.599606 sshd[5209]: Accepted publickey for core from 147.75.109.163 port 40454 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:41:59.598000 audit[5209]: USER_ACCT pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:59.599000 audit[5209]: CRED_ACQ pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:59.599000 audit[5209]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2b542ab0 a2=3 a3=0 items=0 ppid=1 pid=5209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:59.599000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:41:59.602322 sshd[5209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:59.609106 systemd[1]: Started session-19.scope. Nov 1 00:41:59.612198 systemd-logind[1723]: New session 19 of user core. Nov 1 00:41:59.618000 audit[5209]: USER_START pid=5209 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:41:59.621000 audit[5212]: CRED_ACQ pid=5212 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:00.615397 sshd[5209]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:00.616000 audit[5209]: USER_END pid=5209 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:00.616000 audit[5209]: CRED_DISP pid=5209 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:00.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.20.5:22-147.75.109.163:40454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:00.622317 systemd[1]: sshd@18-172.31.20.5:22-147.75.109.163:40454.service: Deactivated successfully. Nov 1 00:42:00.623521 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:42:00.627203 systemd-logind[1723]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:42:00.630517 systemd-logind[1723]: Removed session 19. Nov 1 00:42:00.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.5:22-147.75.109.163:57842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:00.647719 systemd[1]: Started sshd@19-172.31.20.5:22-147.75.109.163:57842.service. Nov 1 00:42:00.838607 sshd[5220]: Accepted publickey for core from 147.75.109.163 port 57842 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:42:00.836000 audit[5220]: USER_ACCT pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:00.838000 audit[5220]: CRED_ACQ pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:00.838000 audit[5220]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5d679e20 a2=3 a3=0 items=0 ppid=1 pid=5220 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:00.838000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:00.840748 sshd[5220]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:00.848957 systemd[1]: Started session-20.scope. Nov 1 00:42:00.851508 systemd-logind[1723]: New session 20 of user core. Nov 1 00:42:00.857000 audit[5220]: USER_START pid=5220 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:00.859000 audit[5223]: CRED_ACQ pid=5223 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:01.176215 sshd[5220]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:01.176000 audit[5220]: USER_END pid=5220 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:01.177000 audit[5220]: CRED_DISP pid=5220 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:01.181228 systemd-logind[1723]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:42:01.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.5:22-147.75.109.163:57842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:01.182533 systemd[1]: sshd@19-172.31.20.5:22-147.75.109.163:57842.service: Deactivated successfully. Nov 1 00:42:01.183618 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:42:01.186272 systemd-logind[1723]: Removed session 20. Nov 1 00:42:01.238909 env[1734]: time="2025-11-01T00:42:01.238860156Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:42:01.490281 env[1734]: time="2025-11-01T00:42:01.489968878Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:01.492264 env[1734]: time="2025-11-01T00:42:01.492103809Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:42:01.539835 kubelet[2612]: E1101 00:42:01.539550 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:42:01.557286 kubelet[2612]: E1101 00:42:01.557027 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:42:01.609501 kubelet[2612]: E1101 00:42:01.609405 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-s6lt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-694c7bcdf8-w5cjp_calico-apiserver(c310f163-2203-4d17-8fa6-ed4211a3c699): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:01.621941 kubelet[2612]: E1101 00:42:01.621886 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:42:03.103427 env[1734]: time="2025-11-01T00:42:03.103364377Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:42:03.368965 env[1734]: time="2025-11-01T00:42:03.368772682Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:03.376438 env[1734]: time="2025-11-01T00:42:03.376343695Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:42:03.376802 kubelet[2612]: E1101 00:42:03.376757 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:42:03.377292 kubelet[2612]: E1101 00:42:03.377261 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:42:03.377936 env[1734]: time="2025-11-01T00:42:03.377896347Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:42:03.393950 kubelet[2612]: E1101 00:42:03.393852 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-l6p6w,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7669f6697f-ds4tg_calico-system(66ef8aaa-4cbe-4280-98d5-566c4289d009): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:03.395526 kubelet[2612]: E1101 00:42:03.395474 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:42:03.762833 env[1734]: time="2025-11-01T00:42:03.762532291Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:03.765407 env[1734]: time="2025-11-01T00:42:03.765242842Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:42:03.765599 kubelet[2612]: E1101 00:42:03.765538 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:42:03.765727 kubelet[2612]: E1101 00:42:03.765595 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:42:03.765817 kubelet[2612]: E1101 00:42:03.765766 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xg94p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:03.771262 env[1734]: time="2025-11-01T00:42:03.771210090Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:42:04.016741 env[1734]: time="2025-11-01T00:42:04.016592548Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:04.019678 env[1734]: time="2025-11-01T00:42:04.019577852Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:42:04.020797 kubelet[2612]: E1101 00:42:04.020754 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:42:04.021978 kubelet[2612]: E1101 00:42:04.021832 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:42:04.023712 kubelet[2612]: E1101 00:42:04.023043 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xg94p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:04.027257 kubelet[2612]: E1101 00:42:04.027197 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:42:05.049853 env[1734]: time="2025-11-01T00:42:05.049400234Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:42:05.299070 env[1734]: time="2025-11-01T00:42:05.299003017Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:05.302928 env[1734]: time="2025-11-01T00:42:05.302743066Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:42:05.303547 kubelet[2612]: E1101 00:42:05.303494 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:42:05.303956 kubelet[2612]: E1101 00:42:05.303570 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:42:05.303956 kubelet[2612]: E1101 00:42:05.303875 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-frcq9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-694c7bcdf8-kntch_calico-apiserver(40f020e9-694f-467c-8633-16e91962974a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:05.304898 env[1734]: time="2025-11-01T00:42:05.304854942Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:42:05.305323 kubelet[2612]: E1101 00:42:05.305258 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:42:05.492000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:05.495558 kernel: kauditd_printk_skb: 57 callbacks suppressed Nov 1 00:42:05.495708 kernel: audit: type=1400 audit(1761957725.492:1376): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:05.492000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fd9ce0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:05.520101 kernel: audit: type=1300 audit(1761957725.492:1376): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fd9ce0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:05.492000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:05.544795 kernel: audit: type=1327 audit(1761957725.492:1376): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:05.544950 kernel: audit: type=1400 audit(1761957725.492:1377): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:05.492000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:05.557124 kernel: audit: type=1300 audit(1761957725.492:1377): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00234dcb0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:05.492000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00234dcb0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:05.569431 kernel: audit: type=1327 audit(1761957725.492:1377): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:05.492000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:05.643111 env[1734]: time="2025-11-01T00:42:05.643024836Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:05.645184 env[1734]: time="2025-11-01T00:42:05.645080297Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:42:05.645458 kubelet[2612]: E1101 00:42:05.645415 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:42:05.645566 kubelet[2612]: E1101 00:42:05.645471 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:42:05.646011 kubelet[2612]: E1101 00:42:05.645940 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:40c8e9570f674faf992af5067a87a776,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-9q4qn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f4f4f9df6-7k8lt_calico-system(6fd5df7e-93f8-425a-9311-2ce972e2adf0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:05.646774 env[1734]: time="2025-11-01T00:42:05.646725001Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:42:05.889401 env[1734]: time="2025-11-01T00:42:05.889171996Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:05.891742 env[1734]: time="2025-11-01T00:42:05.891562276Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:42:05.892013 kubelet[2612]: E1101 00:42:05.891973 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:42:05.892132 kubelet[2612]: E1101 00:42:05.892030 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:42:05.892435 kubelet[2612]: E1101 00:42:05.892363 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xtpbb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-vv82h_calico-system(9e74237e-e6c1-475d-a5d0-2b21bced39ac): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:05.893321 env[1734]: time="2025-11-01T00:42:05.893274829Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:42:05.893904 kubelet[2612]: E1101 00:42:05.893863 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:42:06.143318 env[1734]: time="2025-11-01T00:42:06.143179571Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:06.148387 env[1734]: time="2025-11-01T00:42:06.148293734Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:42:06.150658 kubelet[2612]: E1101 00:42:06.150603 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:42:06.150945 kubelet[2612]: E1101 00:42:06.150910 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:42:06.151294 kubelet[2612]: E1101 00:42:06.151241 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9q4qn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f4f4f9df6-7k8lt_calico-system(6fd5df7e-93f8-425a-9311-2ce972e2adf0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:06.153140 kubelet[2612]: E1101 00:42:06.153090 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:42:06.202526 systemd[1]: Started sshd@20-172.31.20.5:22-147.75.109.163:57858.service. Nov 1 00:42:06.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.5:22-147.75.109.163:57858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:06.212120 kernel: audit: type=1130 audit(1761957726.202:1378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.5:22-147.75.109.163:57858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:06.410378 sshd[5236]: Accepted publickey for core from 147.75.109.163 port 57858 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:42:06.422597 kernel: audit: type=1101 audit(1761957726.408:1379): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:06.408000 audit[5236]: USER_ACCT pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:06.425973 sshd[5236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:06.423000 audit[5236]: CRED_ACQ pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:06.433546 systemd[1]: Started session-21.scope. Nov 1 00:42:06.436025 systemd-logind[1723]: New session 21 of user core. Nov 1 00:42:06.447184 kernel: audit: type=1103 audit(1761957726.423:1380): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:06.447316 kernel: audit: type=1006 audit(1761957726.423:1381): pid=5236 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Nov 1 00:42:06.423000 audit[5236]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe76c591d0 a2=3 a3=0 items=0 ppid=1 pid=5236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:06.423000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:06.446000 audit[5236]: USER_START pid=5236 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:06.451000 audit[5238]: CRED_ACQ pid=5238 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:06.517000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:06.517000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c011fa66e0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:42:06.517000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:42:06.518000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=524570 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:06.518000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c008ad9ef0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:42:06.518000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:42:06.521000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:06.521000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c012356270 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:42:06.521000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:42:06.537000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:06.538000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:06.538000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c011fa7e80 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:42:06.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:42:06.538000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=524564 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:06.538000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c013422b70 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:42:06.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:42:06.537000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c012356450 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:42:06.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:42:06.953118 sshd[5236]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:06.954000 audit[5236]: USER_END pid=5236 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:06.954000 audit[5236]: CRED_DISP pid=5236 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:06.960248 systemd[1]: sshd@20-172.31.20.5:22-147.75.109.163:57858.service: Deactivated successfully. Nov 1 00:42:06.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.5:22-147.75.109.163:57858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:06.961451 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:42:06.962300 systemd-logind[1723]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:42:06.963447 systemd-logind[1723]: Removed session 21. Nov 1 00:42:08.088000 audit[5247]: NETFILTER_CFG table=filter:133 family=2 entries=26 op=nft_register_rule pid=5247 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:42:08.088000 audit[5247]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff25b57f30 a2=0 a3=7fff25b57f1c items=0 ppid=2828 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:08.088000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:42:08.095000 audit[5247]: NETFILTER_CFG table=nat:134 family=2 entries=104 op=nft_register_chain pid=5247 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:42:08.095000 audit[5247]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7fff25b57f30 a2=0 a3=7fff25b57f1c items=0 ppid=2828 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:08.095000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:42:11.058981 env[1734]: time="2025-11-01T00:42:11.058455858Z" level=info msg="StopPodSandbox for \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\"" Nov 1 00:42:11.122090 kernel: kauditd_printk_skb: 31 callbacks suppressed Nov 1 00:42:11.122252 kernel: audit: type=1400 audit(1761957731.109:1395): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:11.109000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:11.109000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021c3b40 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:11.152203 kernel: audit: type=1300 audit(1761957731.109:1395): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021c3b40 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:11.152287 kernel: audit: type=1327 audit(1761957731.109:1395): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:11.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:11.121000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:11.162131 kernel: audit: type=1400 audit(1761957731.121:1396): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:11.121000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021c3b60 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:11.176212 kernel: audit: type=1300 audit(1761957731.121:1396): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021c3b60 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:11.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:11.199081 kernel: audit: type=1327 audit(1761957731.121:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:11.122000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:11.220293 kernel: audit: type=1400 audit(1761957731.122:1397): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:11.220443 kernel: audit: type=1300 audit(1761957731.122:1397): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021c3b80 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:11.122000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021c3b80 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:11.231508 kernel: audit: type=1327 audit(1761957731.122:1397): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:11.122000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:11.240887 kernel: audit: type=1400 audit(1761957731.122:1398): avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:11.122000 audit[2458]: AVC avc: denied { watch } for pid=2458 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:11.122000 audit[2458]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f4e5c0 a2=fc6 a3=0 items=0 ppid=2341 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:11.122000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:11.979970 systemd[1]: Started sshd@21-172.31.20.5:22-147.75.109.163:54024.service. Nov 1 00:42:11.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.5:22-147.75.109.163:54024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:12.184667 sshd[5263]: Accepted publickey for core from 147.75.109.163 port 54024 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:42:12.183000 audit[5263]: USER_ACCT pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:12.185000 audit[5263]: CRED_ACQ pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:12.185000 audit[5263]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe66aa0320 a2=3 a3=0 items=0 ppid=1 pid=5263 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:12.185000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:12.188598 sshd[5263]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:12.198599 systemd-logind[1723]: New session 22 of user core. Nov 1 00:42:12.199572 systemd[1]: Started session-22.scope. Nov 1 00:42:12.212000 audit[5263]: USER_START pid=5263 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:12.215000 audit[5268]: CRED_ACQ pid=5268 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.225 [WARNING][5258] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0", GenerateName:"calico-apiserver-694c7bcdf8-", Namespace:"calico-apiserver", SelfLink:"", UID:"c310f163-2203-4d17-8fa6-ed4211a3c699", ResourceVersion:"1414", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694c7bcdf8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841", Pod:"calico-apiserver-694c7bcdf8-w5cjp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.54.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali819024acdca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.229 [INFO][5258] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.229 [INFO][5258] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" iface="eth0" netns="" Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.229 [INFO][5258] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.229 [INFO][5258] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.609 [INFO][5270] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.614 [INFO][5270] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.615 [INFO][5270] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.639 [WARNING][5270] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.639 [INFO][5270] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.644 [INFO][5270] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:12.649726 env[1734]: 2025-11-01 00:42:12.647 [INFO][5258] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:42:12.652161 env[1734]: time="2025-11-01T00:42:12.649769390Z" level=info msg="TearDown network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\" successfully" Nov 1 00:42:12.652161 env[1734]: time="2025-11-01T00:42:12.649806007Z" level=info msg="StopPodSandbox for \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\" returns successfully" Nov 1 00:42:12.672526 env[1734]: time="2025-11-01T00:42:12.672000334Z" level=info msg="RemovePodSandbox for \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\"" Nov 1 00:42:12.672526 env[1734]: time="2025-11-01T00:42:12.672067076Z" level=info msg="Forcibly stopping sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\"" Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.758 [WARNING][5290] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0", GenerateName:"calico-apiserver-694c7bcdf8-", Namespace:"calico-apiserver", SelfLink:"", UID:"c310f163-2203-4d17-8fa6-ed4211a3c699", ResourceVersion:"1414", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694c7bcdf8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"0a17afc8fbb5d6705906c2b40cd7891c69ae8f0a2a4206f8d94604bdce0bd841", Pod:"calico-apiserver-694c7bcdf8-w5cjp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.54.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali819024acdca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.761 [INFO][5290] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.761 [INFO][5290] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" iface="eth0" netns="" Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.761 [INFO][5290] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.761 [INFO][5290] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.864 [INFO][5297] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.864 [INFO][5297] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.865 [INFO][5297] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.887 [WARNING][5297] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.887 [INFO][5297] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" HandleID="k8s-pod-network.e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--w5cjp-eth0" Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.890 [INFO][5297] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:12.909069 env[1734]: 2025-11-01 00:42:12.899 [INFO][5290] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865" Nov 1 00:42:12.909069 env[1734]: time="2025-11-01T00:42:12.908986851Z" level=info msg="TearDown network for sandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\" successfully" Nov 1 00:42:13.000696 sshd[5263]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:13.002972 env[1734]: time="2025-11-01T00:42:13.002867973Z" level=info msg="RemovePodSandbox \"e3751b8b9af078074c8da0eb0f7721d757afbc21397ce9bf78054fb99dce0865\" returns successfully" Nov 1 00:42:13.009000 audit[5263]: USER_END pid=5263 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:13.011000 audit[5263]: CRED_DISP pid=5263 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:13.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.5:22-147.75.109.163:54024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:13.014895 systemd[1]: sshd@21-172.31.20.5:22-147.75.109.163:54024.service: Deactivated successfully. Nov 1 00:42:13.016027 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:42:13.018509 systemd-logind[1723]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:42:13.021537 systemd-logind[1723]: Removed session 22. Nov 1 00:42:13.028318 env[1734]: time="2025-11-01T00:42:13.028267358Z" level=info msg="StopPodSandbox for \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\"" Nov 1 00:42:13.160720 kubelet[2612]: E1101 00:42:13.160582 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.116 [WARNING][5314] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.116 [INFO][5314] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.116 [INFO][5314] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" iface="eth0" netns="" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.116 [INFO][5314] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.117 [INFO][5314] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.202 [INFO][5322] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.202 [INFO][5322] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.203 [INFO][5322] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.221 [WARNING][5322] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.222 [INFO][5322] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.228 [INFO][5322] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:13.236229 env[1734]: 2025-11-01 00:42:13.231 [INFO][5314] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:42:13.238102 env[1734]: time="2025-11-01T00:42:13.236273164Z" level=info msg="TearDown network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\" successfully" Nov 1 00:42:13.238102 env[1734]: time="2025-11-01T00:42:13.236315488Z" level=info msg="StopPodSandbox for \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\" returns successfully" Nov 1 00:42:13.238102 env[1734]: time="2025-11-01T00:42:13.237694986Z" level=info msg="RemovePodSandbox for \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\"" Nov 1 00:42:13.238102 env[1734]: time="2025-11-01T00:42:13.237739099Z" level=info msg="Forcibly stopping sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\"" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.335 [WARNING][5336] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" WorkloadEndpoint="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.336 [INFO][5336] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.336 [INFO][5336] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" iface="eth0" netns="" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.336 [INFO][5336] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.336 [INFO][5336] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.399 [INFO][5344] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.399 [INFO][5344] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.399 [INFO][5344] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.414 [WARNING][5344] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.414 [INFO][5344] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" HandleID="k8s-pod-network.f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Workload="ip--172--31--20--5-k8s-whisker--5495bf9c66--t8qbt-eth0" Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.422 [INFO][5344] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:13.427448 env[1734]: 2025-11-01 00:42:13.424 [INFO][5336] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb" Nov 1 00:42:13.428316 env[1734]: time="2025-11-01T00:42:13.428270647Z" level=info msg="TearDown network for sandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\" successfully" Nov 1 00:42:13.435321 env[1734]: time="2025-11-01T00:42:13.435229004Z" level=info msg="RemovePodSandbox \"f52ef60ef729b805ee28ea669292ceb73f3d273bfced521161edf2a43b16fffb\" returns successfully" Nov 1 00:42:13.436107 env[1734]: time="2025-11-01T00:42:13.436074899Z" level=info msg="StopPodSandbox for \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\"" Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.507 [WARNING][5359] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7d27004b-6f0c-4540-b573-3c4c5a8ee5bb", ResourceVersion:"1219", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9", Pod:"coredns-668d6bf9bc-s5tsw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.54.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali48cf154d9ea", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.508 [INFO][5359] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.508 [INFO][5359] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" iface="eth0" netns="" Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.508 [INFO][5359] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.508 [INFO][5359] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.548 [INFO][5367] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.548 [INFO][5367] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.549 [INFO][5367] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.557 [WARNING][5367] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.557 [INFO][5367] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.559 [INFO][5367] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:13.565125 env[1734]: 2025-11-01 00:42:13.562 [INFO][5359] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:42:13.566798 env[1734]: time="2025-11-01T00:42:13.565605329Z" level=info msg="TearDown network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\" successfully" Nov 1 00:42:13.566798 env[1734]: time="2025-11-01T00:42:13.565656186Z" level=info msg="StopPodSandbox for \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\" returns successfully" Nov 1 00:42:13.566798 env[1734]: time="2025-11-01T00:42:13.566313460Z" level=info msg="RemovePodSandbox for \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\"" Nov 1 00:42:13.566798 env[1734]: time="2025-11-01T00:42:13.566355321Z" level=info msg="Forcibly stopping sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\"" Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.623 [WARNING][5382] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7d27004b-6f0c-4540-b573-3c4c5a8ee5bb", ResourceVersion:"1219", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"7f40eb8378bc1de93527f303b43e7019921510a1c534ff0fc666f1e1eecf30c9", Pod:"coredns-668d6bf9bc-s5tsw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.54.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali48cf154d9ea", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.624 [INFO][5382] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.624 [INFO][5382] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" iface="eth0" netns="" Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.624 [INFO][5382] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.624 [INFO][5382] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.661 [INFO][5389] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.662 [INFO][5389] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.662 [INFO][5389] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.668 [WARNING][5389] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.669 [INFO][5389] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" HandleID="k8s-pod-network.b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--s5tsw-eth0" Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.671 [INFO][5389] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:13.676121 env[1734]: 2025-11-01 00:42:13.673 [INFO][5382] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56" Nov 1 00:42:13.677333 env[1734]: time="2025-11-01T00:42:13.677280391Z" level=info msg="TearDown network for sandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\" successfully" Nov 1 00:42:13.691330 env[1734]: time="2025-11-01T00:42:13.691158477Z" level=info msg="RemovePodSandbox \"b2a03e5ef4189a2b77a3fc752dfa325319d07fa0f59133472fa9258e81251f56\" returns successfully" Nov 1 00:42:13.692818 env[1734]: time="2025-11-01T00:42:13.692778200Z" level=info msg="StopPodSandbox for \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\"" Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.756 [WARNING][5405] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2", ResourceVersion:"1154", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f", Pod:"coredns-668d6bf9bc-qbfmr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.54.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali579b89633e0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.757 [INFO][5405] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.757 [INFO][5405] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" iface="eth0" netns="" Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.757 [INFO][5405] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.757 [INFO][5405] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.795 [INFO][5412] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.795 [INFO][5412] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.795 [INFO][5412] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.808 [WARNING][5412] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.808 [INFO][5412] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.811 [INFO][5412] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:13.816381 env[1734]: 2025-11-01 00:42:13.813 [INFO][5405] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:42:13.817619 env[1734]: time="2025-11-01T00:42:13.817091779Z" level=info msg="TearDown network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\" successfully" Nov 1 00:42:13.817619 env[1734]: time="2025-11-01T00:42:13.817131658Z" level=info msg="StopPodSandbox for \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\" returns successfully" Nov 1 00:42:13.817948 env[1734]: time="2025-11-01T00:42:13.817919643Z" level=info msg="RemovePodSandbox for \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\"" Nov 1 00:42:13.818181 env[1734]: time="2025-11-01T00:42:13.818127568Z" level=info msg="Forcibly stopping sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\"" Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.888 [WARNING][5427] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6ee6b90c-f131-4fdb-a0e3-3b9d79b680a2", ResourceVersion:"1154", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"978db07ca26dee0e78af87f13f46e8ab567909d598acf9ba9c7c020ada49cc3f", Pod:"coredns-668d6bf9bc-qbfmr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.54.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali579b89633e0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.888 [INFO][5427] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.888 [INFO][5427] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" iface="eth0" netns="" Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.888 [INFO][5427] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.888 [INFO][5427] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.938 [INFO][5434] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.938 [INFO][5434] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.938 [INFO][5434] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.948 [WARNING][5434] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.948 [INFO][5434] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" HandleID="k8s-pod-network.646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Workload="ip--172--31--20--5-k8s-coredns--668d6bf9bc--qbfmr-eth0" Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.955 [INFO][5434] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:13.960919 env[1734]: 2025-11-01 00:42:13.958 [INFO][5427] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4" Nov 1 00:42:13.962294 env[1734]: time="2025-11-01T00:42:13.960879065Z" level=info msg="TearDown network for sandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\" successfully" Nov 1 00:42:13.968426 env[1734]: time="2025-11-01T00:42:13.968375223Z" level=info msg="RemovePodSandbox \"646becf3ab44225aa902e8233be8ca73f441422f3c02043ae3f764325f3df1e4\" returns successfully" Nov 1 00:42:13.970918 env[1734]: time="2025-11-01T00:42:13.970872492Z" level=info msg="StopPodSandbox for \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\"" Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.039 [WARNING][5449] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"9e74237e-e6c1-475d-a5d0-2b21bced39ac", ResourceVersion:"1440", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e", Pod:"goldmane-666569f655-vv82h", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.54.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali2abe8ee139a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.041 [INFO][5449] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.041 [INFO][5449] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" iface="eth0" netns="" Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.042 [INFO][5449] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.042 [INFO][5449] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.112 [INFO][5456] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.114 [INFO][5456] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.114 [INFO][5456] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.132 [WARNING][5456] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.132 [INFO][5456] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.138 [INFO][5456] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:14.143163 env[1734]: 2025-11-01 00:42:14.140 [INFO][5449] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:42:14.144441 env[1734]: time="2025-11-01T00:42:14.144397463Z" level=info msg="TearDown network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\" successfully" Nov 1 00:42:14.144541 env[1734]: time="2025-11-01T00:42:14.144519036Z" level=info msg="StopPodSandbox for \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\" returns successfully" Nov 1 00:42:14.145147 env[1734]: time="2025-11-01T00:42:14.145116552Z" level=info msg="RemovePodSandbox for \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\"" Nov 1 00:42:14.145265 env[1734]: time="2025-11-01T00:42:14.145151140Z" level=info msg="Forcibly stopping sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\"" Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.208 [WARNING][5472] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"9e74237e-e6c1-475d-a5d0-2b21bced39ac", ResourceVersion:"1440", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"100a928001d56d2cec3fffa9883f6b472eca564138fba3bf3a869441fab3ce1e", Pod:"goldmane-666569f655-vv82h", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.54.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali2abe8ee139a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.208 [INFO][5472] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.208 [INFO][5472] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" iface="eth0" netns="" Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.208 [INFO][5472] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.208 [INFO][5472] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.245 [INFO][5479] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.245 [INFO][5479] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.245 [INFO][5479] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.254 [WARNING][5479] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.254 [INFO][5479] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" HandleID="k8s-pod-network.30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Workload="ip--172--31--20--5-k8s-goldmane--666569f655--vv82h-eth0" Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.256 [INFO][5479] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:14.262661 env[1734]: 2025-11-01 00:42:14.258 [INFO][5472] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe" Nov 1 00:42:14.263847 env[1734]: time="2025-11-01T00:42:14.263792422Z" level=info msg="TearDown network for sandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\" successfully" Nov 1 00:42:14.270747 env[1734]: time="2025-11-01T00:42:14.270664192Z" level=info msg="RemovePodSandbox \"30dacb91b083fc254bb22f484d3de5f6dd6f218bb48c56c136ea4d179c7d1afe\" returns successfully" Nov 1 00:42:14.271614 env[1734]: time="2025-11-01T00:42:14.271580200Z" level=info msg="StopPodSandbox for \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\"" Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.339 [WARNING][5495] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0", GenerateName:"calico-kube-controllers-7669f6697f-", Namespace:"calico-system", SelfLink:"", UID:"66ef8aaa-4cbe-4280-98d5-566c4289d009", ResourceVersion:"1427", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7669f6697f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734", Pod:"calico-kube-controllers-7669f6697f-ds4tg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.54.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali3b8ec7aa1cd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.339 [INFO][5495] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.339 [INFO][5495] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" iface="eth0" netns="" Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.339 [INFO][5495] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.339 [INFO][5495] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.377 [INFO][5502] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.377 [INFO][5502] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.377 [INFO][5502] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.387 [WARNING][5502] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.387 [INFO][5502] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.389 [INFO][5502] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:14.393409 env[1734]: 2025-11-01 00:42:14.390 [INFO][5495] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:42:14.393998 env[1734]: time="2025-11-01T00:42:14.393452337Z" level=info msg="TearDown network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\" successfully" Nov 1 00:42:14.393998 env[1734]: time="2025-11-01T00:42:14.393487825Z" level=info msg="StopPodSandbox for \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\" returns successfully" Nov 1 00:42:14.394552 env[1734]: time="2025-11-01T00:42:14.394516287Z" level=info msg="RemovePodSandbox for \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\"" Nov 1 00:42:14.394664 env[1734]: time="2025-11-01T00:42:14.394555559Z" level=info msg="Forcibly stopping sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\"" Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.456 [WARNING][5518] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0", GenerateName:"calico-kube-controllers-7669f6697f-", Namespace:"calico-system", SelfLink:"", UID:"66ef8aaa-4cbe-4280-98d5-566c4289d009", ResourceVersion:"1427", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7669f6697f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"51e380a4e465989737924ad21a4da1804abbc66342efee0c85ea04fca4610734", Pod:"calico-kube-controllers-7669f6697f-ds4tg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.54.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali3b8ec7aa1cd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.457 [INFO][5518] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.457 [INFO][5518] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" iface="eth0" netns="" Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.457 [INFO][5518] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.457 [INFO][5518] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.502 [INFO][5525] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.502 [INFO][5525] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.502 [INFO][5525] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.516 [WARNING][5525] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.516 [INFO][5525] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" HandleID="k8s-pod-network.d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Workload="ip--172--31--20--5-k8s-calico--kube--controllers--7669f6697f--ds4tg-eth0" Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.528 [INFO][5525] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:14.533722 env[1734]: 2025-11-01 00:42:14.531 [INFO][5518] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7" Nov 1 00:42:14.533722 env[1734]: time="2025-11-01T00:42:14.533687725Z" level=info msg="TearDown network for sandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\" successfully" Nov 1 00:42:14.540168 env[1734]: time="2025-11-01T00:42:14.540104181Z" level=info msg="RemovePodSandbox \"d873cf9909e98df3217994cb033f3f1cd544b69b0264f9c853d7365cd1bf17d7\" returns successfully" Nov 1 00:42:14.540840 env[1734]: time="2025-11-01T00:42:14.540802998Z" level=info msg="StopPodSandbox for \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\"" Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.603 [WARNING][5540] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"249cc7c4-c107-468b-9f47-3a65adfb9b30", ResourceVersion:"1424", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21", Pod:"csi-node-driver-5wbbl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.54.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali266f700ed4f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.603 [INFO][5540] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.603 [INFO][5540] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" iface="eth0" netns="" Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.603 [INFO][5540] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.604 [INFO][5540] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.643 [INFO][5547] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.643 [INFO][5547] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.643 [INFO][5547] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.665 [WARNING][5547] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.665 [INFO][5547] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.669 [INFO][5547] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:14.675231 env[1734]: 2025-11-01 00:42:14.671 [INFO][5540] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:42:14.676924 env[1734]: time="2025-11-01T00:42:14.675452844Z" level=info msg="TearDown network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\" successfully" Nov 1 00:42:14.676924 env[1734]: time="2025-11-01T00:42:14.675504065Z" level=info msg="StopPodSandbox for \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\" returns successfully" Nov 1 00:42:14.676924 env[1734]: time="2025-11-01T00:42:14.676166098Z" level=info msg="RemovePodSandbox for \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\"" Nov 1 00:42:14.676924 env[1734]: time="2025-11-01T00:42:14.676200978Z" level=info msg="Forcibly stopping sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\"" Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.782 [WARNING][5561] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"249cc7c4-c107-468b-9f47-3a65adfb9b30", ResourceVersion:"1424", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"67ba6479b0b6b2bb188462a706a0e36e7727d4410d8a713576fd8c66a580ab21", Pod:"csi-node-driver-5wbbl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.54.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali266f700ed4f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.783 [INFO][5561] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.783 [INFO][5561] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" iface="eth0" netns="" Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.783 [INFO][5561] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.783 [INFO][5561] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.835 [INFO][5568] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.835 [INFO][5568] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.835 [INFO][5568] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.843 [WARNING][5568] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.844 [INFO][5568] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" HandleID="k8s-pod-network.dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Workload="ip--172--31--20--5-k8s-csi--node--driver--5wbbl-eth0" Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.847 [INFO][5568] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:14.855154 env[1734]: 2025-11-01 00:42:14.852 [INFO][5561] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf" Nov 1 00:42:14.856569 env[1734]: time="2025-11-01T00:42:14.855187994Z" level=info msg="TearDown network for sandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\" successfully" Nov 1 00:42:14.863633 env[1734]: time="2025-11-01T00:42:14.863574083Z" level=info msg="RemovePodSandbox \"dbd4cbd4c331aca57278a21a83b23bcaab43b2b3dcc1bb7475ddb7dde8d894bf\" returns successfully" Nov 1 00:42:14.864824 env[1734]: time="2025-11-01T00:42:14.864779198Z" level=info msg="StopPodSandbox for \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\"" Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:14.957 [WARNING][5583] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0", GenerateName:"calico-apiserver-694c7bcdf8-", Namespace:"calico-apiserver", SelfLink:"", UID:"40f020e9-694f-467c-8633-16e91962974a", ResourceVersion:"1437", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694c7bcdf8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50", Pod:"calico-apiserver-694c7bcdf8-kntch", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.54.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali05060a94a97", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:14.958 [INFO][5583] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:14.958 [INFO][5583] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" iface="eth0" netns="" Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:14.958 [INFO][5583] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:14.958 [INFO][5583] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:15.000 [INFO][5590] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:15.000 [INFO][5590] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:15.000 [INFO][5590] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:15.019 [WARNING][5590] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:15.019 [INFO][5590] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:15.022 [INFO][5590] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:15.027943 env[1734]: 2025-11-01 00:42:15.025 [INFO][5583] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:42:15.028788 env[1734]: time="2025-11-01T00:42:15.027950096Z" level=info msg="TearDown network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\" successfully" Nov 1 00:42:15.028788 env[1734]: time="2025-11-01T00:42:15.027986994Z" level=info msg="StopPodSandbox for \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\" returns successfully" Nov 1 00:42:15.028788 env[1734]: time="2025-11-01T00:42:15.028571455Z" level=info msg="RemovePodSandbox for \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\"" Nov 1 00:42:15.028788 env[1734]: time="2025-11-01T00:42:15.028608600Z" level=info msg="Forcibly stopping sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\"" Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.095 [WARNING][5606] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0", GenerateName:"calico-apiserver-694c7bcdf8-", Namespace:"calico-apiserver", SelfLink:"", UID:"40f020e9-694f-467c-8633-16e91962974a", ResourceVersion:"1437", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 40, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694c7bcdf8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-5", ContainerID:"66fe8e48a1f60fd5be6d12ec8cd1ac7ed7cf7567ec7217cd0438b9237bf49d50", Pod:"calico-apiserver-694c7bcdf8-kntch", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.54.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali05060a94a97", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.096 [INFO][5606] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.096 [INFO][5606] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" iface="eth0" netns="" Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.096 [INFO][5606] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.096 [INFO][5606] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.144 [INFO][5613] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.145 [INFO][5613] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.145 [INFO][5613] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.153 [WARNING][5613] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.153 [INFO][5613] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" HandleID="k8s-pod-network.e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Workload="ip--172--31--20--5-k8s-calico--apiserver--694c7bcdf8--kntch-eth0" Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.156 [INFO][5613] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:42:15.163847 env[1734]: 2025-11-01 00:42:15.161 [INFO][5606] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0" Nov 1 00:42:15.166138 env[1734]: time="2025-11-01T00:42:15.164228658Z" level=info msg="TearDown network for sandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\" successfully" Nov 1 00:42:15.172924 env[1734]: time="2025-11-01T00:42:15.172816919Z" level=info msg="RemovePodSandbox \"e3e94deaf3c80d757931a14cb44bec57448da10c6f74022d43f45c1433f29ef0\" returns successfully" Nov 1 00:42:17.060794 kubelet[2612]: E1101 00:42:17.060741 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:42:17.061421 kubelet[2612]: E1101 00:42:17.061102 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:42:18.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.5:22-147.75.109.163:54034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:18.024654 systemd[1]: Started sshd@22-172.31.20.5:22-147.75.109.163:54034.service. Nov 1 00:42:18.035558 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:42:18.035745 kernel: audit: type=1130 audit(1761957738.023:1408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.5:22-147.75.109.163:54034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:18.050409 kubelet[2612]: E1101 00:42:18.050366 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:42:18.054664 kubelet[2612]: E1101 00:42:18.054592 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:42:18.246000 audit[5640]: USER_ACCT pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.258209 kernel: audit: type=1101 audit(1761957738.246:1409): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.269974 kernel: audit: type=1103 audit(1761957738.256:1410): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.256000 audit[5640]: CRED_ACQ pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.270193 sshd[5640]: Accepted publickey for core from 147.75.109.163 port 54034 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:42:18.277088 kernel: audit: type=1006 audit(1761957738.256:1411): pid=5640 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:42:18.260408 sshd[5640]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:18.270321 systemd[1]: Started session-23.scope. Nov 1 00:42:18.272703 systemd-logind[1723]: New session 23 of user core. Nov 1 00:42:18.256000 audit[5640]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd012b0850 a2=3 a3=0 items=0 ppid=1 pid=5640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:18.290318 kernel: audit: type=1300 audit(1761957738.256:1411): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd012b0850 a2=3 a3=0 items=0 ppid=1 pid=5640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:18.256000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:18.306919 kernel: audit: type=1327 audit(1761957738.256:1411): proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:18.307087 kernel: audit: type=1105 audit(1761957738.278:1412): pid=5640 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.278000 audit[5640]: USER_START pid=5640 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.281000 audit[5642]: CRED_ACQ pid=5642 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.317083 kernel: audit: type=1103 audit(1761957738.281:1413): pid=5642 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.769065 sshd[5640]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:18.769000 audit[5640]: USER_END pid=5640 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.774389 systemd-logind[1723]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:42:18.776668 systemd[1]: sshd@22-172.31.20.5:22-147.75.109.163:54034.service: Deactivated successfully. Nov 1 00:42:18.777657 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:42:18.779507 systemd-logind[1723]: Removed session 23. Nov 1 00:42:18.782079 kernel: audit: type=1106 audit(1761957738.769:1414): pid=5640 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.770000 audit[5640]: CRED_DISP pid=5640 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:18.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.5:22-147.75.109.163:54034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:18.792083 kernel: audit: type=1104 audit(1761957738.770:1415): pid=5640 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:20.048685 kubelet[2612]: E1101 00:42:20.048640 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:42:23.795963 systemd[1]: Started sshd@23-172.31.20.5:22-147.75.109.163:56916.service. Nov 1 00:42:23.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.5:22-147.75.109.163:56916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:23.799222 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:42:23.799340 kernel: audit: type=1130 audit(1761957743.795:1417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.5:22-147.75.109.163:56916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:23.993000 audit[5656]: USER_ACCT pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:23.995357 sshd[5656]: Accepted publickey for core from 147.75.109.163 port 56916 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:42:24.005089 kernel: audit: type=1101 audit(1761957743.993:1418): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.005626 sshd[5656]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:24.004000 audit[5656]: CRED_ACQ pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.015568 systemd[1]: Started session-24.scope. Nov 1 00:42:24.019185 kernel: audit: type=1103 audit(1761957744.004:1419): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.017779 systemd-logind[1723]: New session 24 of user core. Nov 1 00:42:24.028090 kernel: audit: type=1006 audit(1761957744.004:1420): pid=5656 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Nov 1 00:42:24.004000 audit[5656]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd9ff1ca0 a2=3 a3=0 items=0 ppid=1 pid=5656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:24.039074 kernel: audit: type=1300 audit(1761957744.004:1420): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd9ff1ca0 a2=3 a3=0 items=0 ppid=1 pid=5656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:24.004000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:24.045323 kernel: audit: type=1327 audit(1761957744.004:1420): proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:24.027000 audit[5656]: USER_START pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.058487 kernel: audit: type=1105 audit(1761957744.027:1421): pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.068739 kernel: audit: type=1103 audit(1761957744.044:1422): pid=5658 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.044000 audit[5658]: CRED_ACQ pid=5658 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.069014 kubelet[2612]: E1101 00:42:24.059228 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:42:24.434194 sshd[5656]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:24.434000 audit[5656]: USER_END pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.444092 kernel: audit: type=1106 audit(1761957744.434:1423): pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.445502 systemd[1]: sshd@23-172.31.20.5:22-147.75.109.163:56916.service: Deactivated successfully. Nov 1 00:42:24.446316 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:42:24.447358 systemd-logind[1723]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:42:24.434000 audit[5656]: CRED_DISP pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.448634 systemd-logind[1723]: Removed session 24. Nov 1 00:42:24.455085 kernel: audit: type=1104 audit(1761957744.434:1424): pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:24.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.5:22-147.75.109.163:56916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:29.461763 systemd[1]: Started sshd@24-172.31.20.5:22-147.75.109.163:56930.service. Nov 1 00:42:29.466340 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:42:29.466477 kernel: audit: type=1130 audit(1761957749.462:1426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.5:22-147.75.109.163:56930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:29.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.5:22-147.75.109.163:56930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:29.665000 audit[5667]: USER_ACCT pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:29.675926 sshd[5667]: Accepted publickey for core from 147.75.109.163 port 56930 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:42:29.676287 kernel: audit: type=1101 audit(1761957749.665:1427): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:29.665000 audit[5667]: CRED_ACQ pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:29.687920 sshd[5667]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:29.688293 kernel: audit: type=1103 audit(1761957749.665:1428): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:29.696135 kernel: audit: type=1006 audit(1761957749.665:1429): pid=5667 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:42:29.702309 systemd[1]: Started session-25.scope. Nov 1 00:42:29.704161 systemd-logind[1723]: New session 25 of user core. Nov 1 00:42:29.665000 audit[5667]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe06f74520 a2=3 a3=0 items=0 ppid=1 pid=5667 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:29.724270 kernel: audit: type=1300 audit(1761957749.665:1429): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe06f74520 a2=3 a3=0 items=0 ppid=1 pid=5667 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:29.665000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:29.741028 kernel: audit: type=1327 audit(1761957749.665:1429): proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:29.741187 kernel: audit: type=1105 audit(1761957749.710:1430): pid=5667 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:29.710000 audit[5667]: USER_START pid=5667 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:29.723000 audit[5669]: CRED_ACQ pid=5669 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:29.750257 kernel: audit: type=1103 audit(1761957749.723:1431): pid=5669 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:30.050905 kubelet[2612]: E1101 00:42:30.050787 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:42:30.052263 kubelet[2612]: E1101 00:42:30.052217 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:42:30.213645 sshd[5667]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:30.214000 audit[5667]: USER_END pid=5667 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:30.227095 kernel: audit: type=1106 audit(1761957750.214:1432): pid=5667 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:30.215000 audit[5667]: CRED_DISP pid=5667 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:30.237241 kernel: audit: type=1104 audit(1761957750.215:1433): pid=5667 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:30.237820 systemd[1]: sshd@24-172.31.20.5:22-147.75.109.163:56930.service: Deactivated successfully. Nov 1 00:42:30.238916 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:42:30.240961 systemd-logind[1723]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:42:30.243110 systemd-logind[1723]: Removed session 25. Nov 1 00:42:30.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.5:22-147.75.109.163:56930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:33.051542 kubelet[2612]: E1101 00:42:33.051494 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:42:33.052609 kubelet[2612]: E1101 00:42:33.052549 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:42:34.047812 kubelet[2612]: E1101 00:42:34.047763 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:42:35.241931 systemd[1]: Started sshd@25-172.31.20.5:22-147.75.109.163:42200.service. Nov 1 00:42:35.254294 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:42:35.254405 kernel: audit: type=1130 audit(1761957755.241:1435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.5:22-147.75.109.163:42200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:35.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.5:22-147.75.109.163:42200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:35.439598 sshd[5679]: Accepted publickey for core from 147.75.109.163 port 42200 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:42:35.458198 kernel: audit: type=1101 audit(1761957755.438:1436): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.438000 audit[5679]: USER_ACCT pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.441962 sshd[5679]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:35.440000 audit[5679]: CRED_ACQ pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.466744 systemd[1]: Started session-26.scope. Nov 1 00:42:35.468306 systemd-logind[1723]: New session 26 of user core. Nov 1 00:42:35.472106 kernel: audit: type=1103 audit(1761957755.440:1437): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.484805 kernel: audit: type=1006 audit(1761957755.440:1438): pid=5679 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 00:42:35.484958 kernel: audit: type=1300 audit(1761957755.440:1438): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd693fd920 a2=3 a3=0 items=0 ppid=1 pid=5679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:35.440000 audit[5679]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd693fd920 a2=3 a3=0 items=0 ppid=1 pid=5679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:35.440000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:35.499677 kernel: audit: type=1327 audit(1761957755.440:1438): proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:35.476000 audit[5679]: USER_START pid=5679 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.511241 kernel: audit: type=1105 audit(1761957755.476:1439): pid=5679 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.479000 audit[5681]: CRED_ACQ pid=5681 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.520024 kernel: audit: type=1103 audit(1761957755.479:1440): pid=5681 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.896183 sshd[5679]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:35.896000 audit[5679]: USER_END pid=5679 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.909111 kernel: audit: type=1106 audit(1761957755.896:1441): pid=5679 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.911382 systemd[1]: sshd@25-172.31.20.5:22-147.75.109.163:42200.service: Deactivated successfully. Nov 1 00:42:35.912529 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 00:42:35.914910 systemd-logind[1723]: Session 26 logged out. Waiting for processes to exit. Nov 1 00:42:35.917170 systemd-logind[1723]: Removed session 26. Nov 1 00:42:35.908000 audit[5679]: CRED_DISP pid=5679 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.929120 kernel: audit: type=1104 audit(1761957755.908:1442): pid=5679 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:42:35.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.5:22-147.75.109.163:42200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:37.048392 kubelet[2612]: E1101 00:42:37.048350 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:42:43.049606 kubelet[2612]: E1101 00:42:43.049543 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:42:45.052268 env[1734]: time="2025-11-01T00:42:45.052229960Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:42:45.297366 env[1734]: time="2025-11-01T00:42:45.297306799Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:45.299511 env[1734]: time="2025-11-01T00:42:45.299434905Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:42:45.304023 kubelet[2612]: E1101 00:42:45.302380 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:42:45.304023 kubelet[2612]: E1101 00:42:45.303783 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:42:45.305506 kubelet[2612]: E1101 00:42:45.305454 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xg94p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:45.307455 env[1734]: time="2025-11-01T00:42:45.307414316Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:42:45.552615 env[1734]: time="2025-11-01T00:42:45.552551040Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:45.554810 env[1734]: time="2025-11-01T00:42:45.554639261Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:42:45.554970 kubelet[2612]: E1101 00:42:45.554912 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:42:45.554970 kubelet[2612]: E1101 00:42:45.554966 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:42:45.555553 kubelet[2612]: E1101 00:42:45.555147 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xg94p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-5wbbl_calico-system(249cc7c4-c107-468b-9f47-3a65adfb9b30): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:45.556422 kubelet[2612]: E1101 00:42:45.556358 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:42:46.047936 env[1734]: time="2025-11-01T00:42:46.047903261Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:42:46.295758 env[1734]: time="2025-11-01T00:42:46.295712797Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:46.298570 env[1734]: time="2025-11-01T00:42:46.298419579Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:42:46.299021 kubelet[2612]: E1101 00:42:46.298961 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:42:46.299021 kubelet[2612]: E1101 00:42:46.299014 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:42:46.299669 kubelet[2612]: E1101 00:42:46.299141 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:40c8e9570f674faf992af5067a87a776,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-9q4qn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f4f4f9df6-7k8lt_calico-system(6fd5df7e-93f8-425a-9311-2ce972e2adf0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:46.302705 env[1734]: time="2025-11-01T00:42:46.302631663Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:42:46.555026 env[1734]: time="2025-11-01T00:42:46.554738923Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:46.557475 env[1734]: time="2025-11-01T00:42:46.557392515Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:42:46.557790 kubelet[2612]: E1101 00:42:46.557665 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:42:46.557790 kubelet[2612]: E1101 00:42:46.557725 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:42:46.558749 kubelet[2612]: E1101 00:42:46.557891 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9q4qn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f4f4f9df6-7k8lt_calico-system(6fd5df7e-93f8-425a-9311-2ce972e2adf0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:46.559515 kubelet[2612]: E1101 00:42:46.559466 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:42:48.048815 env[1734]: time="2025-11-01T00:42:48.048764280Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:42:48.297463 env[1734]: time="2025-11-01T00:42:48.297407332Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:48.299765 env[1734]: time="2025-11-01T00:42:48.299618359Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:42:48.299966 kubelet[2612]: E1101 00:42:48.299896 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:42:48.300380 kubelet[2612]: E1101 00:42:48.299967 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:42:48.300380 kubelet[2612]: E1101 00:42:48.300305 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xtpbb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-vv82h_calico-system(9e74237e-e6c1-475d-a5d0-2b21bced39ac): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:48.301077 env[1734]: time="2025-11-01T00:42:48.301028816Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:42:48.301499 kubelet[2612]: E1101 00:42:48.301443 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:42:48.546584 env[1734]: time="2025-11-01T00:42:48.546531686Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:48.548924 env[1734]: time="2025-11-01T00:42:48.548706671Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:42:48.549450 kubelet[2612]: E1101 00:42:48.549400 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:42:48.550246 kubelet[2612]: E1101 00:42:48.549459 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:42:48.550246 kubelet[2612]: E1101 00:42:48.549623 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-l6p6w,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7669f6697f-ds4tg_calico-system(66ef8aaa-4cbe-4280-98d5-566c4289d009): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:48.550843 kubelet[2612]: E1101 00:42:48.550808 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:42:49.048483 env[1734]: time="2025-11-01T00:42:49.048439482Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:42:49.290990 env[1734]: time="2025-11-01T00:42:49.290937284Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:49.293185 env[1734]: time="2025-11-01T00:42:49.293109392Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:42:49.293473 kubelet[2612]: E1101 00:42:49.293347 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:42:49.293473 kubelet[2612]: E1101 00:42:49.293397 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:42:49.293574 kubelet[2612]: E1101 00:42:49.293515 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-s6lt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-694c7bcdf8-w5cjp_calico-apiserver(c310f163-2203-4d17-8fa6-ed4211a3c699): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:49.294859 kubelet[2612]: E1101 00:42:49.294791 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:42:49.444699 systemd[1]: cri-containerd-fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75.scope: Deactivated successfully. Nov 1 00:42:49.445081 systemd[1]: cri-containerd-fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75.scope: Consumed 4.594s CPU time. Nov 1 00:42:49.452000 audit: BPF prog-id=82 op=UNLOAD Nov 1 00:42:49.460785 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:42:49.460953 kernel: audit: type=1334 audit(1761957769.452:1444): prog-id=82 op=UNLOAD Nov 1 00:42:49.452000 audit: BPF prog-id=97 op=UNLOAD Nov 1 00:42:49.465565 kernel: audit: type=1334 audit(1761957769.452:1445): prog-id=97 op=UNLOAD Nov 1 00:42:49.490206 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75-rootfs.mount: Deactivated successfully. Nov 1 00:42:49.517043 env[1734]: time="2025-11-01T00:42:49.516972634Z" level=info msg="shim disconnected" id=fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75 Nov 1 00:42:49.517043 env[1734]: time="2025-11-01T00:42:49.517021338Z" level=warning msg="cleaning up after shim disconnected" id=fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75 namespace=k8s.io Nov 1 00:42:49.517043 env[1734]: time="2025-11-01T00:42:49.517033636Z" level=info msg="cleaning up dead shim" Nov 1 00:42:49.527708 env[1734]: time="2025-11-01T00:42:49.527656215Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:42:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5740 runtime=io.containerd.runc.v2\n" Nov 1 00:42:49.965711 kubelet[2612]: I1101 00:42:49.965655 2612 scope.go:117] "RemoveContainer" containerID="fc3a257074275329824bf00f22e2e7a1192ba70718aba5288bc5afa8704a8c75" Nov 1 00:42:49.982765 env[1734]: time="2025-11-01T00:42:49.982709930Z" level=info msg="CreateContainer within sandbox \"4fd46c24ade81e5646cfe64fd6b936a3bb21a6d6c9886dfe27dc8526745c5aac\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Nov 1 00:42:50.013797 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1878112313.mount: Deactivated successfully. Nov 1 00:42:50.029003 env[1734]: time="2025-11-01T00:42:50.028933934Z" level=info msg="CreateContainer within sandbox \"4fd46c24ade81e5646cfe64fd6b936a3bb21a6d6c9886dfe27dc8526745c5aac\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"02493ccb85f2cd5f49f85099f7361f86e77091310c4d06d4179f5e912c712634\"" Nov 1 00:42:50.029550 env[1734]: time="2025-11-01T00:42:50.029519666Z" level=info msg="StartContainer for \"02493ccb85f2cd5f49f85099f7361f86e77091310c4d06d4179f5e912c712634\"" Nov 1 00:42:50.057040 systemd[1]: Started cri-containerd-02493ccb85f2cd5f49f85099f7361f86e77091310c4d06d4179f5e912c712634.scope. Nov 1 00:42:50.099717 kernel: audit: type=1400 audit(1761957770.085:1446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099886 kernel: audit: type=1400 audit(1761957770.085:1447): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.108124 kernel: audit: type=1400 audit(1761957770.085:1448): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.117476 kernel: audit: type=1400 audit(1761957770.085:1449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.126191 kernel: audit: type=1400 audit(1761957770.085:1450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.134455 kernel: audit: type=1400 audit(1761957770.085:1451): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.143511 kernel: audit: type=1400 audit(1761957770.085:1452): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.152500 kernel: audit: type=1400 audit(1761957770.085:1453): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.091000 audit: BPF prog-id=210 op=LOAD Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2341 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:50.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032343933636362383566326364356634396638353039396637333631 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2341 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:50.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032343933636362383566326364356634396638353039396637333631 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.092000 audit: BPF prog-id=211 op=LOAD Nov 1 00:42:50.092000 audit[5762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000391290 items=0 ppid=2341 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:50.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032343933636362383566326364356634396638353039396637333631 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.098000 audit: BPF prog-id=212 op=LOAD Nov 1 00:42:50.098000 audit[5762]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003912d8 items=0 ppid=2341 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:50.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032343933636362383566326364356634396638353039396637333631 Nov 1 00:42:50.099000 audit: BPF prog-id=212 op=UNLOAD Nov 1 00:42:50.099000 audit: BPF prog-id=211 op=UNLOAD Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { perfmon } for pid=5762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit[5762]: AVC avc: denied { bpf } for pid=5762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:50.099000 audit: BPF prog-id=213 op=LOAD Nov 1 00:42:50.099000 audit[5762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003916e8 items=0 ppid=2341 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:50.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032343933636362383566326364356634396638353039396637333631 Nov 1 00:42:50.164552 env[1734]: time="2025-11-01T00:42:50.160156515Z" level=info msg="StartContainer for \"02493ccb85f2cd5f49f85099f7361f86e77091310c4d06d4179f5e912c712634\" returns successfully" Nov 1 00:42:51.038000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:42:51.039097 systemd[1]: cri-containerd-4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab.scope: Deactivated successfully. Nov 1 00:42:51.039446 systemd[1]: cri-containerd-4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab.scope: Consumed 14.843s CPU time. Nov 1 00:42:51.042000 audit: BPF prog-id=126 op=UNLOAD Nov 1 00:42:51.075399 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab-rootfs.mount: Deactivated successfully. Nov 1 00:42:51.122777 env[1734]: time="2025-11-01T00:42:51.122724085Z" level=info msg="shim disconnected" id=4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab Nov 1 00:42:51.126572 env[1734]: time="2025-11-01T00:42:51.123133420Z" level=warning msg="cleaning up after shim disconnected" id=4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab namespace=k8s.io Nov 1 00:42:51.126572 env[1734]: time="2025-11-01T00:42:51.123158480Z" level=info msg="cleaning up dead shim" Nov 1 00:42:51.139757 env[1734]: time="2025-11-01T00:42:51.139711106Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:42:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5803 runtime=io.containerd.runc.v2\n" Nov 1 00:42:51.274000 audit[5773]: AVC avc: denied { watch } for pid=5773 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:51.274000 audit[5773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000556930 a2=fc6 a3=0 items=0 ppid=2341 pid=5773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:51.274000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:51.275000 audit[5773]: AVC avc: denied { watch } for pid=5773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:42:51.275000 audit[5773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0008afb00 a2=fc6 a3=0 items=0 ppid=2341 pid=5773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c153,c212 key=(null) Nov 1 00:42:51.275000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:42:51.981436 kubelet[2612]: I1101 00:42:51.981405 2612 scope.go:117] "RemoveContainer" containerID="4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab" Nov 1 00:42:51.989461 env[1734]: time="2025-11-01T00:42:51.989413743Z" level=info msg="CreateContainer within sandbox \"34f2b24f37f5239b54d18671c5af851f9d969a6759017b114df730bae7943755\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Nov 1 00:42:52.014747 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2562008600.mount: Deactivated successfully. Nov 1 00:42:52.032386 env[1734]: time="2025-11-01T00:42:52.032321636Z" level=info msg="CreateContainer within sandbox \"34f2b24f37f5239b54d18671c5af851f9d969a6759017b114df730bae7943755\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba\"" Nov 1 00:42:52.033038 env[1734]: time="2025-11-01T00:42:52.032990315Z" level=info msg="StartContainer for \"43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba\"" Nov 1 00:42:52.058462 systemd[1]: Started cri-containerd-43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba.scope. Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.075000 audit: BPF prog-id=214 op=LOAD Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2821 pid=5824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:52.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433373735666261663564656462633166306335303032643166623838 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2821 pid=5824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:52.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433373735666261663564656462633166306335303032643166623838 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit: BPF prog-id=215 op=LOAD Nov 1 00:42:52.076000 audit[5824]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ae1b0 items=0 ppid=2821 pid=5824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:52.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433373735666261663564656462633166306335303032643166623838 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit: BPF prog-id=216 op=LOAD Nov 1 00:42:52.076000 audit[5824]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ae1f8 items=0 ppid=2821 pid=5824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:52.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433373735666261663564656462633166306335303032643166623838 Nov 1 00:42:52.076000 audit: BPF prog-id=216 op=UNLOAD Nov 1 00:42:52.076000 audit: BPF prog-id=215 op=UNLOAD Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { perfmon } for pid=5824 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit[5824]: AVC avc: denied { bpf } for pid=5824 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:52.076000 audit: BPF prog-id=217 op=LOAD Nov 1 00:42:52.076000 audit[5824]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ae608 items=0 ppid=2821 pid=5824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:52.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433373735666261663564656462633166306335303032643166623838 Nov 1 00:42:52.099401 env[1734]: time="2025-11-01T00:42:52.099348313Z" level=info msg="StartContainer for \"43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba\" returns successfully" Nov 1 00:42:54.106732 kubelet[2612]: E1101 00:42:54.106654 2612 controller.go:195] "Failed to update lease" err="Put \"https://172.31.20.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-5?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" Nov 1 00:42:54.641088 systemd[1]: cri-containerd-10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419.scope: Deactivated successfully. Nov 1 00:42:54.641336 systemd[1]: cri-containerd-10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419.scope: Consumed 3.192s CPU time. Nov 1 00:42:54.647628 kernel: kauditd_printk_skb: 114 callbacks suppressed Nov 1 00:42:54.647759 kernel: audit: type=1334 audit(1761957774.643:1486): prog-id=86 op=UNLOAD Nov 1 00:42:54.643000 audit: BPF prog-id=86 op=UNLOAD Nov 1 00:42:54.643000 audit: BPF prog-id=99 op=UNLOAD Nov 1 00:42:54.651114 kernel: audit: type=1334 audit(1761957774.643:1487): prog-id=99 op=UNLOAD Nov 1 00:42:54.669949 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419-rootfs.mount: Deactivated successfully. Nov 1 00:42:54.729093 env[1734]: time="2025-11-01T00:42:54.729004920Z" level=info msg="shim disconnected" id=10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419 Nov 1 00:42:54.729093 env[1734]: time="2025-11-01T00:42:54.729086579Z" level=warning msg="cleaning up after shim disconnected" id=10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419 namespace=k8s.io Nov 1 00:42:54.729709 env[1734]: time="2025-11-01T00:42:54.729099869Z" level=info msg="cleaning up dead shim" Nov 1 00:42:54.740213 env[1734]: time="2025-11-01T00:42:54.740161101Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:42:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5882 runtime=io.containerd.runc.v2\n" Nov 1 00:42:54.991681 kubelet[2612]: I1101 00:42:54.991567 2612 scope.go:117] "RemoveContainer" containerID="10f5209f8dabf6920e603657a258a778e7d2f8eb5e3a1a220d009362fffa0419" Nov 1 00:42:54.994602 env[1734]: time="2025-11-01T00:42:54.994550576Z" level=info msg="CreateContainer within sandbox \"a903e7eac38b0d07f4f8d7d1f94c8177b91c34a0eb726952ca0a848d2353838f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Nov 1 00:42:55.020166 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2490234930.mount: Deactivated successfully. Nov 1 00:42:55.030413 env[1734]: time="2025-11-01T00:42:55.030349742Z" level=info msg="CreateContainer within sandbox \"a903e7eac38b0d07f4f8d7d1f94c8177b91c34a0eb726952ca0a848d2353838f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"eaf3b3b6d05da2ffbaf80f589de9b51743213ffdc207d21ef66037c96d71e0f6\"" Nov 1 00:42:55.031276 env[1734]: time="2025-11-01T00:42:55.031240465Z" level=info msg="StartContainer for \"eaf3b3b6d05da2ffbaf80f589de9b51743213ffdc207d21ef66037c96d71e0f6\"" Nov 1 00:42:55.059515 systemd[1]: Started cri-containerd-eaf3b3b6d05da2ffbaf80f589de9b51743213ffdc207d21ef66037c96d71e0f6.scope. Nov 1 00:42:55.090927 kernel: audit: type=1400 audit(1761957775.076:1488): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.091108 kernel: audit: type=1400 audit(1761957775.076:1489): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.105354 kernel: audit: type=1400 audit(1761957775.076:1490): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.105486 kernel: audit: type=1400 audit(1761957775.076:1491): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.111450 kernel: audit: type=1400 audit(1761957775.076:1492): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.117076 kernel: audit: type=1400 audit(1761957775.076:1493): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.131432 kernel: audit: type=1400 audit(1761957775.076:1494): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.131569 kernel: audit: type=1400 audit(1761957775.076:1495): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.089000 audit: BPF prog-id=218 op=LOAD Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2311 pid=5904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:55.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663362336236643035646132666662616638306635383964653962 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2311 pid=5904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:55.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663362336236643035646132666662616638306635383964653962 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.090000 audit: BPF prog-id=219 op=LOAD Nov 1 00:42:55.090000 audit[5904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c94d0 items=0 ppid=2311 pid=5904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:55.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663362336236643035646132666662616638306635383964653962 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit: BPF prog-id=220 op=LOAD Nov 1 00:42:55.097000 audit[5904]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c9518 items=0 ppid=2311 pid=5904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:55.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663362336236643035646132666662616638306635383964653962 Nov 1 00:42:55.097000 audit: BPF prog-id=220 op=UNLOAD Nov 1 00:42:55.097000 audit: BPF prog-id=219 op=UNLOAD Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { perfmon } for pid=5904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit[5904]: AVC avc: denied { bpf } for pid=5904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:42:55.097000 audit: BPF prog-id=221 op=LOAD Nov 1 00:42:55.097000 audit[5904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c9928 items=0 ppid=2311 pid=5904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:55.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561663362336236643035646132666662616638306635383964653962 Nov 1 00:42:55.159794 env[1734]: time="2025-11-01T00:42:55.159691502Z" level=info msg="StartContainer for \"eaf3b3b6d05da2ffbaf80f589de9b51743213ffdc207d21ef66037c96d71e0f6\" returns successfully" Nov 1 00:42:57.048386 env[1734]: time="2025-11-01T00:42:57.048251582Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:42:57.291025 env[1734]: time="2025-11-01T00:42:57.290879295Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:42:57.293323 env[1734]: time="2025-11-01T00:42:57.293248323Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:42:57.293576 kubelet[2612]: E1101 00:42:57.293525 2612 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:42:57.293952 kubelet[2612]: E1101 00:42:57.293588 2612 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:42:57.293952 kubelet[2612]: E1101 00:42:57.293752 2612 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-frcq9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-694c7bcdf8-kntch_calico-apiserver(40f020e9-694f-467c-8633-16e91962974a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:42:57.294982 kubelet[2612]: E1101 00:42:57.294940 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a" Nov 1 00:42:59.051076 kubelet[2612]: E1101 00:42:59.051013 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-5wbbl" podUID="249cc7c4-c107-468b-9f47-3a65adfb9b30" Nov 1 00:43:00.051811 kubelet[2612]: E1101 00:43:00.051766 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7669f6697f-ds4tg" podUID="66ef8aaa-4cbe-4280-98d5-566c4289d009" Nov 1 00:43:01.049517 kubelet[2612]: E1101 00:43:01.049467 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f4f4f9df6-7k8lt" podUID="6fd5df7e-93f8-425a-9311-2ce972e2adf0" Nov 1 00:43:02.071519 kubelet[2612]: E1101 00:43:02.067891 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-vv82h" podUID="9e74237e-e6c1-475d-a5d0-2b21bced39ac" Nov 1 00:43:03.732500 systemd[1]: cri-containerd-43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba.scope: Deactivated successfully. Nov 1 00:43:03.731000 audit: BPF prog-id=214 op=UNLOAD Nov 1 00:43:03.735131 kernel: kauditd_printk_skb: 49 callbacks suppressed Nov 1 00:43:03.735242 kernel: audit: type=1334 audit(1761957783.731:1506): prog-id=214 op=UNLOAD Nov 1 00:43:03.740000 audit: BPF prog-id=217 op=UNLOAD Nov 1 00:43:03.745109 kernel: audit: type=1334 audit(1761957783.740:1507): prog-id=217 op=UNLOAD Nov 1 00:43:03.761495 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba-rootfs.mount: Deactivated successfully. Nov 1 00:43:03.812315 env[1734]: time="2025-11-01T00:43:03.812268840Z" level=info msg="shim disconnected" id=43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba Nov 1 00:43:03.812315 env[1734]: time="2025-11-01T00:43:03.812315579Z" level=warning msg="cleaning up after shim disconnected" id=43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba namespace=k8s.io Nov 1 00:43:03.813024 env[1734]: time="2025-11-01T00:43:03.812325116Z" level=info msg="cleaning up dead shim" Nov 1 00:43:03.822593 env[1734]: time="2025-11-01T00:43:03.822533054Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:43:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5947 runtime=io.containerd.runc.v2\n" Nov 1 00:43:04.048529 kubelet[2612]: E1101 00:43:04.048271 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-w5cjp" podUID="c310f163-2203-4d17-8fa6-ed4211a3c699" Nov 1 00:43:04.054793 kubelet[2612]: I1101 00:43:04.054624 2612 scope.go:117] "RemoveContainer" containerID="4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab" Nov 1 00:43:04.055134 kubelet[2612]: I1101 00:43:04.055097 2612 scope.go:117] "RemoveContainer" containerID="43775fbaf5dedbc1f0c5002d1fb8851c71eba7deec2a432c3e94d7d44e6703ba" Nov 1 00:43:04.055378 kubelet[2612]: E1101 00:43:04.055341 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-7dcd859c48-fxjmv_tigera-operator(46175887-daad-4c40-814b-964edca9b022)\"" pod="tigera-operator/tigera-operator-7dcd859c48-fxjmv" podUID="46175887-daad-4c40-814b-964edca9b022" Nov 1 00:43:04.064668 env[1734]: time="2025-11-01T00:43:04.064625522Z" level=info msg="RemoveContainer for \"4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab\"" Nov 1 00:43:04.070929 env[1734]: time="2025-11-01T00:43:04.070890284Z" level=info msg="RemoveContainer for \"4d5a0e9654942744c488a2f3a8a9dcc393393441aae1198d625366e66b91a0ab\" returns successfully" Nov 1 00:43:04.107628 kubelet[2612]: E1101 00:43:04.107584 2612 controller.go:195] "Failed to update lease" err="Put \"https://172.31.20.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-5?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" Nov 1 00:43:06.522000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.522000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=524570 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.536110 kernel: audit: type=1400 audit(1761957786.522:1508): avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.536272 kernel: audit: type=1400 audit(1761957786.522:1509): avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=524570 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.536314 kernel: audit: type=1300 audit(1761957786.522:1509): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0134226f0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.522000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0134226f0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.522000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:43:06.551658 kernel: audit: type=1327 audit(1761957786.522:1509): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:43:06.551816 kernel: audit: type=1300 audit(1761957786.522:1508): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004976520 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.522000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004976520 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.522000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:43:06.566554 kernel: audit: type=1327 audit(1761957786.522:1508): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:43:06.566720 kernel: audit: type=1400 audit(1761957786.522:1510): avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.522000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.522000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c01207c810 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.581723 kernel: audit: type=1300 audit(1761957786.522:1510): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c01207c810 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.522000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:43:06.535000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=524564 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.535000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0134227e0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:43:06.535000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.535000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0052e6c40 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:43:06.535000 audit[2490]: AVC avc: denied { watch } for pid=2490 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524568 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:06.535000 audit[2490]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c01207c8d0 a2=fc6 a3=0 items=0 ppid=2309 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c79 key=(null) Nov 1 00:43:06.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Nov 1 00:43:10.047681 kubelet[2612]: E1101 00:43:10.047632 2612 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-694c7bcdf8-kntch" podUID="40f020e9-694f-467c-8633-16e91962974a"