Nov 1 00:44:23.025988 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Oct 31 23:02:53 -00 2025 Nov 1 00:44:23.026026 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:44:23.026045 kernel: BIOS-provided physical RAM map: Nov 1 00:44:23.026057 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Nov 1 00:44:23.026068 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000786cdfff] usable Nov 1 00:44:23.026079 kernel: BIOS-e820: [mem 0x00000000786ce000-0x000000007894dfff] reserved Nov 1 00:44:23.026093 kernel: BIOS-e820: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Nov 1 00:44:23.026105 kernel: BIOS-e820: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Nov 1 00:44:23.026120 kernel: BIOS-e820: [mem 0x00000000789de000-0x000000007c97bfff] usable Nov 1 00:44:23.026132 kernel: BIOS-e820: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Nov 1 00:44:23.026144 kernel: NX (Execute Disable) protection: active Nov 1 00:44:23.026156 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Nov 1 00:44:23.026168 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Nov 1 00:44:23.026180 kernel: extended physical RAM map: Nov 1 00:44:23.026197 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Nov 1 00:44:23.026210 kernel: reserve setup_data: [mem 0x0000000000100000-0x0000000076813017] usable Nov 1 00:44:23.026223 kernel: reserve setup_data: [mem 0x0000000076813018-0x000000007681be57] usable Nov 1 00:44:23.026236 kernel: reserve setup_data: [mem 0x000000007681be58-0x00000000786cdfff] usable Nov 1 00:44:23.026249 kernel: reserve setup_data: [mem 0x00000000786ce000-0x000000007894dfff] reserved Nov 1 00:44:23.026262 kernel: reserve setup_data: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Nov 1 00:44:23.026274 kernel: reserve setup_data: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Nov 1 00:44:23.026287 kernel: reserve setup_data: [mem 0x00000000789de000-0x000000007c97bfff] usable Nov 1 00:44:23.026300 kernel: reserve setup_data: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Nov 1 00:44:23.026312 kernel: efi: EFI v2.70 by EDK II Nov 1 00:44:23.026328 kernel: efi: SMBIOS=0x7886a000 ACPI=0x7895d000 ACPI 2.0=0x7895d014 MEMATTR=0x77003a98 Nov 1 00:44:23.026340 kernel: SMBIOS 2.7 present. Nov 1 00:44:23.026353 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Nov 1 00:44:23.026366 kernel: Hypervisor detected: KVM Nov 1 00:44:23.026378 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Nov 1 00:44:23.026391 kernel: kvm-clock: cpu 0, msr 461a0001, primary cpu clock Nov 1 00:44:23.026404 kernel: kvm-clock: using sched offset of 4027862423 cycles Nov 1 00:44:23.026418 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Nov 1 00:44:23.026431 kernel: tsc: Detected 2500.004 MHz processor Nov 1 00:44:23.026445 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Nov 1 00:44:23.026458 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Nov 1 00:44:23.026473 kernel: last_pfn = 0x7c97c max_arch_pfn = 0x400000000 Nov 1 00:44:23.026487 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Nov 1 00:44:23.026500 kernel: Using GB pages for direct mapping Nov 1 00:44:23.026513 kernel: Secure boot disabled Nov 1 00:44:23.026526 kernel: ACPI: Early table checksum verification disabled Nov 1 00:44:23.026544 kernel: ACPI: RSDP 0x000000007895D014 000024 (v02 AMAZON) Nov 1 00:44:23.026558 kernel: ACPI: XSDT 0x000000007895C0E8 00006C (v01 AMAZON AMZNFACP 00000001 01000013) Nov 1 00:44:23.026575 kernel: ACPI: FACP 0x0000000078955000 000114 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Nov 1 00:44:23.026589 kernel: ACPI: DSDT 0x0000000078956000 00115A (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Nov 1 00:44:23.026603 kernel: ACPI: FACS 0x00000000789D0000 000040 Nov 1 00:44:23.026617 kernel: ACPI: WAET 0x000000007895B000 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Nov 1 00:44:23.026631 kernel: ACPI: SLIT 0x000000007895A000 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Nov 1 00:44:23.026646 kernel: ACPI: APIC 0x0000000078959000 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Nov 1 00:44:23.026660 kernel: ACPI: SRAT 0x0000000078958000 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Nov 1 00:44:23.026676 kernel: ACPI: HPET 0x0000000078954000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Nov 1 00:44:23.026688 kernel: ACPI: SSDT 0x0000000078953000 000759 (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Nov 1 00:44:23.026699 kernel: ACPI: SSDT 0x0000000078952000 00007F (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Nov 1 00:44:23.026711 kernel: ACPI: BGRT 0x0000000078951000 000038 (v01 AMAZON AMAZON 00000002 01000013) Nov 1 00:44:23.026723 kernel: ACPI: Reserving FACP table memory at [mem 0x78955000-0x78955113] Nov 1 00:44:23.026735 kernel: ACPI: Reserving DSDT table memory at [mem 0x78956000-0x78957159] Nov 1 00:44:23.026747 kernel: ACPI: Reserving FACS table memory at [mem 0x789d0000-0x789d003f] Nov 1 00:44:23.026759 kernel: ACPI: Reserving WAET table memory at [mem 0x7895b000-0x7895b027] Nov 1 00:44:23.026772 kernel: ACPI: Reserving SLIT table memory at [mem 0x7895a000-0x7895a06b] Nov 1 00:44:23.026786 kernel: ACPI: Reserving APIC table memory at [mem 0x78959000-0x78959075] Nov 1 00:44:23.026799 kernel: ACPI: Reserving SRAT table memory at [mem 0x78958000-0x7895809f] Nov 1 00:44:23.026811 kernel: ACPI: Reserving HPET table memory at [mem 0x78954000-0x78954037] Nov 1 00:44:23.026823 kernel: ACPI: Reserving SSDT table memory at [mem 0x78953000-0x78953758] Nov 1 00:44:23.026835 kernel: ACPI: Reserving SSDT table memory at [mem 0x78952000-0x7895207e] Nov 1 00:44:23.026847 kernel: ACPI: Reserving BGRT table memory at [mem 0x78951000-0x78951037] Nov 1 00:44:23.026859 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Nov 1 00:44:23.026871 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Nov 1 00:44:23.026884 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Nov 1 00:44:23.026898 kernel: NUMA: Initialized distance table, cnt=1 Nov 1 00:44:23.026924 kernel: NODE_DATA(0) allocated [mem 0x7a8ef000-0x7a8f4fff] Nov 1 00:44:23.026937 kernel: Zone ranges: Nov 1 00:44:23.026949 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Nov 1 00:44:23.026961 kernel: DMA32 [mem 0x0000000001000000-0x000000007c97bfff] Nov 1 00:44:23.026973 kernel: Normal empty Nov 1 00:44:23.026985 kernel: Movable zone start for each node Nov 1 00:44:23.026997 kernel: Early memory node ranges Nov 1 00:44:23.027008 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Nov 1 00:44:23.027024 kernel: node 0: [mem 0x0000000000100000-0x00000000786cdfff] Nov 1 00:44:23.027036 kernel: node 0: [mem 0x00000000789de000-0x000000007c97bfff] Nov 1 00:44:23.027048 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007c97bfff] Nov 1 00:44:23.027060 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Nov 1 00:44:23.027072 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Nov 1 00:44:23.027085 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Nov 1 00:44:23.027097 kernel: On node 0, zone DMA32: 13956 pages in unavailable ranges Nov 1 00:44:23.027109 kernel: ACPI: PM-Timer IO Port: 0xb008 Nov 1 00:44:23.027121 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Nov 1 00:44:23.027136 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Nov 1 00:44:23.027148 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Nov 1 00:44:23.027160 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Nov 1 00:44:23.027181 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Nov 1 00:44:23.027194 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Nov 1 00:44:23.027206 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Nov 1 00:44:23.027218 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Nov 1 00:44:23.027231 kernel: TSC deadline timer available Nov 1 00:44:23.027243 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Nov 1 00:44:23.027258 kernel: [mem 0x7ca00000-0xffffffff] available for PCI devices Nov 1 00:44:23.027270 kernel: Booting paravirtualized kernel on KVM Nov 1 00:44:23.027283 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Nov 1 00:44:23.027295 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Nov 1 00:44:23.027307 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Nov 1 00:44:23.027319 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Nov 1 00:44:23.027331 kernel: pcpu-alloc: [0] 0 1 Nov 1 00:44:23.027343 kernel: kvm-guest: stealtime: cpu 0, msr 7a41c0c0 Nov 1 00:44:23.027355 kernel: kvm-guest: PV spinlocks enabled Nov 1 00:44:23.027371 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Nov 1 00:44:23.027384 kernel: Built 1 zonelists, mobility grouping on. Total pages: 501318 Nov 1 00:44:23.027396 kernel: Policy zone: DMA32 Nov 1 00:44:23.027410 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:44:23.027423 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:44:23.027435 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:44:23.027447 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Nov 1 00:44:23.027460 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:44:23.027476 kernel: Memory: 1876636K/2037804K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47496K init, 4084K bss, 160908K reserved, 0K cma-reserved) Nov 1 00:44:23.027488 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Nov 1 00:44:23.027499 kernel: Kernel/User page tables isolation: enabled Nov 1 00:44:23.027511 kernel: ftrace: allocating 34614 entries in 136 pages Nov 1 00:44:23.027523 kernel: ftrace: allocated 136 pages with 2 groups Nov 1 00:44:23.027535 kernel: rcu: Hierarchical RCU implementation. Nov 1 00:44:23.027548 kernel: rcu: RCU event tracing is enabled. Nov 1 00:44:23.027574 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Nov 1 00:44:23.027587 kernel: Rude variant of Tasks RCU enabled. Nov 1 00:44:23.027599 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:44:23.027612 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:44:23.027624 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Nov 1 00:44:23.027639 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Nov 1 00:44:23.027652 kernel: random: crng init done Nov 1 00:44:23.027664 kernel: Console: colour dummy device 80x25 Nov 1 00:44:23.027676 kernel: printk: console [tty0] enabled Nov 1 00:44:23.027689 kernel: printk: console [ttyS0] enabled Nov 1 00:44:23.027702 kernel: ACPI: Core revision 20210730 Nov 1 00:44:23.027715 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Nov 1 00:44:23.027731 kernel: APIC: Switch to symmetric I/O mode setup Nov 1 00:44:23.027743 kernel: x2apic enabled Nov 1 00:44:23.027757 kernel: Switched APIC routing to physical x2apic. Nov 1 00:44:23.027769 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093d6e846, max_idle_ns: 440795249997 ns Nov 1 00:44:23.027783 kernel: Calibrating delay loop (skipped) preset value.. 5000.00 BogoMIPS (lpj=2500004) Nov 1 00:44:23.027796 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Nov 1 00:44:23.027809 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Nov 1 00:44:23.027824 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Nov 1 00:44:23.027836 kernel: Spectre V2 : Mitigation: Retpolines Nov 1 00:44:23.027846 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Nov 1 00:44:23.027857 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Nov 1 00:44:23.027868 kernel: RETBleed: Vulnerable Nov 1 00:44:23.027879 kernel: Speculative Store Bypass: Vulnerable Nov 1 00:44:23.027892 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Nov 1 00:44:23.027904 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Nov 1 00:44:23.029963 kernel: GDS: Unknown: Dependent on hypervisor status Nov 1 00:44:23.029981 kernel: active return thunk: its_return_thunk Nov 1 00:44:23.029996 kernel: ITS: Mitigation: Aligned branch/return thunks Nov 1 00:44:23.030016 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Nov 1 00:44:23.030031 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Nov 1 00:44:23.030046 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Nov 1 00:44:23.030061 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Nov 1 00:44:23.030076 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Nov 1 00:44:23.030090 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Nov 1 00:44:23.030105 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Nov 1 00:44:23.030119 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Nov 1 00:44:23.030134 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Nov 1 00:44:23.030149 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Nov 1 00:44:23.030163 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Nov 1 00:44:23.030179 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Nov 1 00:44:23.030191 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Nov 1 00:44:23.030207 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Nov 1 00:44:23.030219 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Nov 1 00:44:23.030233 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Nov 1 00:44:23.030247 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Nov 1 00:44:23.030261 kernel: Freeing SMP alternatives memory: 32K Nov 1 00:44:23.030275 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:44:23.030289 kernel: LSM: Security Framework initializing Nov 1 00:44:23.030303 kernel: SELinux: Initializing. Nov 1 00:44:23.030317 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Nov 1 00:44:23.030334 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Nov 1 00:44:23.030349 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Nov 1 00:44:23.030363 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Nov 1 00:44:23.030377 kernel: signal: max sigframe size: 3632 Nov 1 00:44:23.030392 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:44:23.030406 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Nov 1 00:44:23.030420 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:44:23.030434 kernel: x86: Booting SMP configuration: Nov 1 00:44:23.030448 kernel: .... node #0, CPUs: #1 Nov 1 00:44:23.030462 kernel: kvm-clock: cpu 1, msr 461a0041, secondary cpu clock Nov 1 00:44:23.030479 kernel: kvm-guest: stealtime: cpu 1, msr 7a51c0c0 Nov 1 00:44:23.030495 kernel: Transient Scheduler Attacks: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Nov 1 00:44:23.030510 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Nov 1 00:44:23.030524 kernel: smp: Brought up 1 node, 2 CPUs Nov 1 00:44:23.030538 kernel: smpboot: Max logical packages: 1 Nov 1 00:44:23.030553 kernel: smpboot: Total of 2 processors activated (10000.01 BogoMIPS) Nov 1 00:44:23.030567 kernel: devtmpfs: initialized Nov 1 00:44:23.030581 kernel: x86/mm: Memory block size: 128MB Nov 1 00:44:23.030598 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7895e000-0x789ddfff] (524288 bytes) Nov 1 00:44:23.030612 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:44:23.030627 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Nov 1 00:44:23.030641 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:44:23.030655 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:44:23.030669 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:44:23.030683 kernel: audit: type=2000 audit(1761957862.679:1): state=initialized audit_enabled=0 res=1 Nov 1 00:44:23.030697 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:44:23.030711 kernel: thermal_sys: Registered thermal governor 'user_space' Nov 1 00:44:23.030728 kernel: cpuidle: using governor menu Nov 1 00:44:23.030741 kernel: ACPI: bus type PCI registered Nov 1 00:44:23.030753 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:44:23.030767 kernel: dca service started, version 1.12.1 Nov 1 00:44:23.030780 kernel: PCI: Using configuration type 1 for base access Nov 1 00:44:23.030794 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Nov 1 00:44:23.030807 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:44:23.030821 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:44:23.030834 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:44:23.030851 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:44:23.030865 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:44:23.030878 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:44:23.030892 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:44:23.030905 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:44:23.030931 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Nov 1 00:44:23.030943 kernel: ACPI: Interpreter enabled Nov 1 00:44:23.030956 kernel: ACPI: PM: (supports S0 S5) Nov 1 00:44:23.030969 kernel: ACPI: Using IOAPIC for interrupt routing Nov 1 00:44:23.031955 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Nov 1 00:44:23.031973 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Nov 1 00:44:23.031986 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Nov 1 00:44:23.032212 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Nov 1 00:44:23.032349 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Nov 1 00:44:23.032368 kernel: acpiphp: Slot [3] registered Nov 1 00:44:23.032384 kernel: acpiphp: Slot [4] registered Nov 1 00:44:23.032399 kernel: acpiphp: Slot [5] registered Nov 1 00:44:23.032418 kernel: acpiphp: Slot [6] registered Nov 1 00:44:23.032433 kernel: acpiphp: Slot [7] registered Nov 1 00:44:23.032448 kernel: acpiphp: Slot [8] registered Nov 1 00:44:23.032463 kernel: acpiphp: Slot [9] registered Nov 1 00:44:23.032478 kernel: acpiphp: Slot [10] registered Nov 1 00:44:23.032493 kernel: acpiphp: Slot [11] registered Nov 1 00:44:23.032508 kernel: acpiphp: Slot [12] registered Nov 1 00:44:23.032523 kernel: acpiphp: Slot [13] registered Nov 1 00:44:23.032537 kernel: acpiphp: Slot [14] registered Nov 1 00:44:23.032556 kernel: acpiphp: Slot [15] registered Nov 1 00:44:23.032571 kernel: acpiphp: Slot [16] registered Nov 1 00:44:23.032585 kernel: acpiphp: Slot [17] registered Nov 1 00:44:23.032600 kernel: acpiphp: Slot [18] registered Nov 1 00:44:23.032615 kernel: acpiphp: Slot [19] registered Nov 1 00:44:23.032630 kernel: acpiphp: Slot [20] registered Nov 1 00:44:23.032645 kernel: acpiphp: Slot [21] registered Nov 1 00:44:23.032659 kernel: acpiphp: Slot [22] registered Nov 1 00:44:23.032674 kernel: acpiphp: Slot [23] registered Nov 1 00:44:23.032689 kernel: acpiphp: Slot [24] registered Nov 1 00:44:23.032707 kernel: acpiphp: Slot [25] registered Nov 1 00:44:23.032721 kernel: acpiphp: Slot [26] registered Nov 1 00:44:23.032736 kernel: acpiphp: Slot [27] registered Nov 1 00:44:23.032750 kernel: acpiphp: Slot [28] registered Nov 1 00:44:23.032765 kernel: acpiphp: Slot [29] registered Nov 1 00:44:23.032780 kernel: acpiphp: Slot [30] registered Nov 1 00:44:23.032794 kernel: acpiphp: Slot [31] registered Nov 1 00:44:23.032809 kernel: PCI host bridge to bus 0000:00 Nov 1 00:44:23.032975 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Nov 1 00:44:23.033099 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Nov 1 00:44:23.033214 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Nov 1 00:44:23.033328 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Nov 1 00:44:23.033442 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x2000ffffffff window] Nov 1 00:44:23.033555 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Nov 1 00:44:23.033700 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Nov 1 00:44:23.033841 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Nov 1 00:44:23.033994 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Nov 1 00:44:23.034122 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Nov 1 00:44:23.043132 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Nov 1 00:44:23.043304 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Nov 1 00:44:23.043437 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Nov 1 00:44:23.043564 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Nov 1 00:44:23.043694 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Nov 1 00:44:23.043814 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Nov 1 00:44:23.047066 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Nov 1 00:44:23.047246 kernel: pci 0000:00:03.0: reg 0x10: [mem 0x80000000-0x803fffff pref] Nov 1 00:44:23.047378 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Nov 1 00:44:23.047507 kernel: pci 0000:00:03.0: BAR 0: assigned to efifb Nov 1 00:44:23.047636 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Nov 1 00:44:23.047781 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Nov 1 00:44:23.047931 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80404000-0x80407fff] Nov 1 00:44:23.048086 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Nov 1 00:44:23.048217 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80400000-0x80403fff] Nov 1 00:44:23.048236 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Nov 1 00:44:23.048252 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Nov 1 00:44:23.048267 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Nov 1 00:44:23.048286 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Nov 1 00:44:23.048300 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Nov 1 00:44:23.048315 kernel: iommu: Default domain type: Translated Nov 1 00:44:23.048330 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Nov 1 00:44:23.048457 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Nov 1 00:44:23.048587 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Nov 1 00:44:23.048716 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Nov 1 00:44:23.048735 kernel: vgaarb: loaded Nov 1 00:44:23.048754 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:44:23.048770 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:44:23.048785 kernel: PTP clock support registered Nov 1 00:44:23.048800 kernel: Registered efivars operations Nov 1 00:44:23.048814 kernel: PCI: Using ACPI for IRQ routing Nov 1 00:44:23.048829 kernel: PCI: pci_cache_line_size set to 64 bytes Nov 1 00:44:23.048844 kernel: e820: reserve RAM buffer [mem 0x76813018-0x77ffffff] Nov 1 00:44:23.048858 kernel: e820: reserve RAM buffer [mem 0x786ce000-0x7bffffff] Nov 1 00:44:23.048872 kernel: e820: reserve RAM buffer [mem 0x7c97c000-0x7fffffff] Nov 1 00:44:23.048889 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Nov 1 00:44:23.048904 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Nov 1 00:44:23.048942 kernel: clocksource: Switched to clocksource kvm-clock Nov 1 00:44:23.048956 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:44:23.048971 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:44:23.048986 kernel: pnp: PnP ACPI init Nov 1 00:44:23.049000 kernel: pnp: PnP ACPI: found 5 devices Nov 1 00:44:23.049015 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Nov 1 00:44:23.049030 kernel: NET: Registered PF_INET protocol family Nov 1 00:44:23.049048 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:44:23.049063 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Nov 1 00:44:23.049078 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:44:23.049093 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Nov 1 00:44:23.049108 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Nov 1 00:44:23.049122 kernel: TCP: Hash tables configured (established 16384 bind 16384) Nov 1 00:44:23.049137 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Nov 1 00:44:23.049152 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Nov 1 00:44:23.049166 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:44:23.049184 kernel: NET: Registered PF_XDP protocol family Nov 1 00:44:23.049312 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Nov 1 00:44:23.049430 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Nov 1 00:44:23.049545 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Nov 1 00:44:23.049659 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Nov 1 00:44:23.049772 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x2000ffffffff window] Nov 1 00:44:23.049904 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Nov 1 00:44:23.050068 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Nov 1 00:44:23.050091 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:44:23.050107 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Nov 1 00:44:23.050123 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093d6e846, max_idle_ns: 440795249997 ns Nov 1 00:44:23.050138 kernel: clocksource: Switched to clocksource tsc Nov 1 00:44:23.050152 kernel: Initialise system trusted keyrings Nov 1 00:44:23.050167 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Nov 1 00:44:23.050182 kernel: Key type asymmetric registered Nov 1 00:44:23.050196 kernel: Asymmetric key parser 'x509' registered Nov 1 00:44:23.050214 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:44:23.050228 kernel: io scheduler mq-deadline registered Nov 1 00:44:23.050243 kernel: io scheduler kyber registered Nov 1 00:44:23.050257 kernel: io scheduler bfq registered Nov 1 00:44:23.050272 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Nov 1 00:44:23.050287 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:44:23.050301 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Nov 1 00:44:23.050316 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Nov 1 00:44:23.050330 kernel: i8042: Warning: Keylock active Nov 1 00:44:23.050345 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Nov 1 00:44:23.050362 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Nov 1 00:44:23.050495 kernel: rtc_cmos 00:00: RTC can wake from S4 Nov 1 00:44:23.050613 kernel: rtc_cmos 00:00: registered as rtc0 Nov 1 00:44:23.050728 kernel: rtc_cmos 00:00: setting system clock to 2025-11-01T00:44:22 UTC (1761957862) Nov 1 00:44:23.050845 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Nov 1 00:44:23.050864 kernel: intel_pstate: CPU model not supported Nov 1 00:44:23.050878 kernel: efifb: probing for efifb Nov 1 00:44:23.050897 kernel: efifb: framebuffer at 0x80000000, using 1876k, total 1875k Nov 1 00:44:23.052972 kernel: efifb: mode is 800x600x32, linelength=3200, pages=1 Nov 1 00:44:23.053005 kernel: efifb: scrolling: redraw Nov 1 00:44:23.053020 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Nov 1 00:44:23.053032 kernel: Console: switching to colour frame buffer device 100x37 Nov 1 00:44:23.053045 kernel: fb0: EFI VGA frame buffer device Nov 1 00:44:23.053084 kernel: pstore: Registered efi as persistent store backend Nov 1 00:44:23.053100 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:44:23.060306 kernel: Segment Routing with IPv6 Nov 1 00:44:23.060342 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:44:23.060359 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:44:23.060375 kernel: Key type dns_resolver registered Nov 1 00:44:23.060391 kernel: IPI shorthand broadcast: enabled Nov 1 00:44:23.060407 kernel: sched_clock: Marking stable (373458081, 132704980)->(573313038, -67149977) Nov 1 00:44:23.060423 kernel: registered taskstats version 1 Nov 1 00:44:23.060439 kernel: Loading compiled-in X.509 certificates Nov 1 00:44:23.060455 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: f2055682e6899ad8548fd369019e7b47939b46a0' Nov 1 00:44:23.060470 kernel: Key type .fscrypt registered Nov 1 00:44:23.060489 kernel: Key type fscrypt-provisioning registered Nov 1 00:44:23.060505 kernel: pstore: Using crash dump compression: deflate Nov 1 00:44:23.060521 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:44:23.060537 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:44:23.060552 kernel: ima: No architecture policies found Nov 1 00:44:23.060568 kernel: clk: Disabling unused clocks Nov 1 00:44:23.060583 kernel: Freeing unused kernel image (initmem) memory: 47496K Nov 1 00:44:23.060598 kernel: Write protecting the kernel read-only data: 28672k Nov 1 00:44:23.060614 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Nov 1 00:44:23.060632 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Nov 1 00:44:23.060649 kernel: Run /init as init process Nov 1 00:44:23.060664 kernel: with arguments: Nov 1 00:44:23.060681 kernel: /init Nov 1 00:44:23.060696 kernel: with environment: Nov 1 00:44:23.060712 kernel: HOME=/ Nov 1 00:44:23.060727 kernel: TERM=linux Nov 1 00:44:23.060745 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:44:23.060767 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:44:23.060789 systemd[1]: Detected virtualization amazon. Nov 1 00:44:23.060806 systemd[1]: Detected architecture x86-64. Nov 1 00:44:23.060822 systemd[1]: Running in initrd. Nov 1 00:44:23.060838 systemd[1]: No hostname configured, using default hostname. Nov 1 00:44:23.060853 systemd[1]: Hostname set to . Nov 1 00:44:23.060870 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:44:23.060886 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:44:23.060905 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:44:23.060931 systemd[1]: Reached target cryptsetup.target. Nov 1 00:44:23.060943 systemd[1]: Reached target paths.target. Nov 1 00:44:23.060956 systemd[1]: Reached target slices.target. Nov 1 00:44:23.060969 systemd[1]: Reached target swap.target. Nov 1 00:44:23.060982 systemd[1]: Reached target timers.target. Nov 1 00:44:23.060999 systemd[1]: Listening on iscsid.socket. Nov 1 00:44:23.061013 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:44:23.061026 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:44:23.061040 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:44:23.061055 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:44:23.061069 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:44:23.061083 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:44:23.061100 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:44:23.061114 systemd[1]: Reached target sockets.target. Nov 1 00:44:23.061127 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:44:23.061142 systemd[1]: Finished network-cleanup.service. Nov 1 00:44:23.061156 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:44:23.061170 systemd[1]: Starting systemd-journald.service... Nov 1 00:44:23.061186 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:44:23.063541 systemd[1]: Starting systemd-resolved.service... Nov 1 00:44:23.063571 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:44:23.063595 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Nov 1 00:44:23.063613 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:44:23.063631 kernel: audit: type=1130 audit(1761957863.019:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.063648 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:44:23.063665 kernel: audit: type=1130 audit(1761957863.033:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.063682 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:44:23.063699 kernel: audit: type=1130 audit(1761957863.052:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.063715 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:44:23.063741 systemd-journald[185]: Journal started Nov 1 00:44:23.063834 systemd-journald[185]: Runtime Journal (/run/log/journal/ec22a9d49550225b8a021eafd8df02ea) is 4.8M, max 38.3M, 33.5M free. Nov 1 00:44:23.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.027866 systemd-modules-load[186]: Inserted module 'overlay' Nov 1 00:44:23.070263 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:44:23.085937 systemd[1]: Started systemd-journald.service. Nov 1 00:44:23.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.098935 kernel: audit: type=1130 audit(1761957863.090:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.099191 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:44:23.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.104491 systemd-resolved[187]: Positive Trust Anchors: Nov 1 00:44:23.110638 kernel: audit: type=1130 audit(1761957863.100:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.104502 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:44:23.104558 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:44:23.137604 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:44:23.137640 kernel: Bridge firewalling registered Nov 1 00:44:23.137660 kernel: audit: type=1130 audit(1761957863.126:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.137687 kernel: audit: type=1130 audit(1761957863.128:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.108287 systemd-resolved[187]: Defaulting to hostname 'linux'. Nov 1 00:44:23.116174 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:44:23.124302 systemd-modules-load[186]: Inserted module 'br_netfilter' Nov 1 00:44:23.127786 systemd[1]: Started systemd-resolved.service. Nov 1 00:44:23.129092 systemd[1]: Reached target nss-lookup.target. Nov 1 00:44:23.150836 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:44:23.161987 kernel: SCSI subsystem initialized Nov 1 00:44:23.167448 dracut-cmdline[202]: dracut-dracut-053 Nov 1 00:44:23.171702 dracut-cmdline[202]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:44:23.186660 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:44:23.186693 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:44:23.186713 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:44:23.184753 systemd-modules-load[186]: Inserted module 'dm_multipath' Nov 1 00:44:23.198862 kernel: audit: type=1130 audit(1761957863.186:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.185748 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:44:23.188537 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:44:23.205016 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:44:23.214624 kernel: audit: type=1130 audit(1761957863.205:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.260940 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:44:23.279942 kernel: iscsi: registered transport (tcp) Nov 1 00:44:23.304715 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:44:23.304798 kernel: QLogic iSCSI HBA Driver Nov 1 00:44:23.336663 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:44:23.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.338698 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:44:23.389970 kernel: raid6: avx512x4 gen() 18043 MB/s Nov 1 00:44:23.407964 kernel: raid6: avx512x4 xor() 8099 MB/s Nov 1 00:44:23.425968 kernel: raid6: avx512x2 gen() 17843 MB/s Nov 1 00:44:23.443959 kernel: raid6: avx512x2 xor() 24279 MB/s Nov 1 00:44:23.461960 kernel: raid6: avx512x1 gen() 17963 MB/s Nov 1 00:44:23.479950 kernel: raid6: avx512x1 xor() 22052 MB/s Nov 1 00:44:23.497962 kernel: raid6: avx2x4 gen() 17852 MB/s Nov 1 00:44:23.515950 kernel: raid6: avx2x4 xor() 7122 MB/s Nov 1 00:44:23.533963 kernel: raid6: avx2x2 gen() 17843 MB/s Nov 1 00:44:23.551958 kernel: raid6: avx2x2 xor() 18034 MB/s Nov 1 00:44:23.569960 kernel: raid6: avx2x1 gen() 13788 MB/s Nov 1 00:44:23.587959 kernel: raid6: avx2x1 xor() 15883 MB/s Nov 1 00:44:23.605958 kernel: raid6: sse2x4 gen() 9588 MB/s Nov 1 00:44:23.623968 kernel: raid6: sse2x4 xor() 6002 MB/s Nov 1 00:44:23.641962 kernel: raid6: sse2x2 gen() 10561 MB/s Nov 1 00:44:23.659961 kernel: raid6: sse2x2 xor() 6141 MB/s Nov 1 00:44:23.677960 kernel: raid6: sse2x1 gen() 9495 MB/s Nov 1 00:44:23.696208 kernel: raid6: sse2x1 xor() 4839 MB/s Nov 1 00:44:23.696259 kernel: raid6: using algorithm avx512x4 gen() 18043 MB/s Nov 1 00:44:23.696278 kernel: raid6: .... xor() 8099 MB/s, rmw enabled Nov 1 00:44:23.697288 kernel: raid6: using avx512x2 recovery algorithm Nov 1 00:44:23.711941 kernel: xor: automatically using best checksumming function avx Nov 1 00:44:23.815944 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Nov 1 00:44:23.824885 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:44:23.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.825000 audit: BPF prog-id=7 op=LOAD Nov 1 00:44:23.825000 audit: BPF prog-id=8 op=LOAD Nov 1 00:44:23.826485 systemd[1]: Starting systemd-udevd.service... Nov 1 00:44:23.839927 systemd-udevd[385]: Using default interface naming scheme 'v252'. Nov 1 00:44:23.845587 systemd[1]: Started systemd-udevd.service. Nov 1 00:44:23.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.850290 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:44:23.868356 dracut-pre-trigger[394]: rd.md=0: removing MD RAID activation Nov 1 00:44:23.900942 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:44:23.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.902611 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:44:23.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:23.945622 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:44:24.004934 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:44:24.029016 kernel: ena 0000:00:05.0: ENA device version: 0.10 Nov 1 00:44:24.049313 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Nov 1 00:44:24.049483 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Nov 1 00:44:24.049619 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80400000, mac addr 06:87:f5:cf:a9:19 Nov 1 00:44:24.049756 kernel: AVX2 version of gcm_enc/dec engaged. Nov 1 00:44:24.049773 kernel: AES CTR mode by8 optimization enabled Nov 1 00:44:24.052212 (udev-worker)[433]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:44:24.064935 kernel: nvme nvme0: pci function 0000:00:04.0 Nov 1 00:44:24.065182 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Nov 1 00:44:24.077942 kernel: nvme nvme0: 2/0/0 default/read/poll queues Nov 1 00:44:24.083759 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Nov 1 00:44:24.083828 kernel: GPT:9289727 != 33554431 Nov 1 00:44:24.083848 kernel: GPT:Alternate GPT header not at the end of the disk. Nov 1 00:44:24.087178 kernel: GPT:9289727 != 33554431 Nov 1 00:44:24.087250 kernel: GPT: Use GNU Parted to correct GPT errors. Nov 1 00:44:24.089287 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:44:24.148935 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (437) Nov 1 00:44:24.178801 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:44:24.192901 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:44:24.217085 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:44:24.226101 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:44:24.226860 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:44:24.237525 systemd[1]: Starting disk-uuid.service... Nov 1 00:44:24.244793 disk-uuid[593]: Primary Header is updated. Nov 1 00:44:24.244793 disk-uuid[593]: Secondary Entries is updated. Nov 1 00:44:24.244793 disk-uuid[593]: Secondary Header is updated. Nov 1 00:44:24.251077 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:44:24.256948 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:44:25.264947 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:44:25.265322 disk-uuid[594]: The operation has completed successfully. Nov 1 00:44:25.408497 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:44:25.408632 systemd[1]: Finished disk-uuid.service. Nov 1 00:44:25.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.410611 systemd[1]: Starting verity-setup.service... Nov 1 00:44:25.436930 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Nov 1 00:44:25.537305 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:44:25.539509 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:44:25.542946 systemd[1]: Finished verity-setup.service. Nov 1 00:44:25.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.639935 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:44:25.640759 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:44:25.641568 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:44:25.642605 systemd[1]: Starting ignition-setup.service... Nov 1 00:44:25.647450 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:44:25.676873 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:44:25.676969 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:44:25.676992 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:44:25.687973 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:44:25.702886 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:44:25.713979 systemd[1]: Finished ignition-setup.service. Nov 1 00:44:25.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.716171 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:44:25.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.735000 audit: BPF prog-id=9 op=LOAD Nov 1 00:44:25.734874 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:44:25.737024 systemd[1]: Starting systemd-networkd.service... Nov 1 00:44:25.762336 systemd-networkd[1106]: lo: Link UP Nov 1 00:44:25.762349 systemd-networkd[1106]: lo: Gained carrier Nov 1 00:44:25.763534 systemd-networkd[1106]: Enumeration completed Nov 1 00:44:25.763654 systemd[1]: Started systemd-networkd.service. Nov 1 00:44:25.764070 systemd-networkd[1106]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:44:25.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.766995 systemd[1]: Reached target network.target. Nov 1 00:44:25.768267 systemd-networkd[1106]: eth0: Link UP Nov 1 00:44:25.768273 systemd-networkd[1106]: eth0: Gained carrier Nov 1 00:44:25.769957 systemd[1]: Starting iscsiuio.service... Nov 1 00:44:25.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.777224 systemd[1]: Started iscsiuio.service. Nov 1 00:44:25.779960 systemd[1]: Starting iscsid.service... Nov 1 00:44:25.783852 iscsid[1111]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:44:25.783852 iscsid[1111]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:44:25.783852 iscsid[1111]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:44:25.783852 iscsid[1111]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:44:25.783852 iscsid[1111]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:44:25.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.798854 iscsid[1111]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:44:25.784080 systemd-networkd[1106]: eth0: DHCPv4 address 172.31.16.197/20, gateway 172.31.16.1 acquired from 172.31.16.1 Nov 1 00:44:25.786035 systemd[1]: Started iscsid.service. Nov 1 00:44:25.788116 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:44:25.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:25.805442 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:44:25.806346 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:44:25.807557 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:44:25.809891 systemd[1]: Reached target remote-fs.target. Nov 1 00:44:25.812791 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:44:25.822851 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:44:25.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.241468 ignition[1087]: Ignition 2.14.0 Nov 1 00:44:26.241484 ignition[1087]: Stage: fetch-offline Nov 1 00:44:26.241656 ignition[1087]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:44:26.241701 ignition[1087]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:44:26.260171 ignition[1087]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:44:26.260671 ignition[1087]: Ignition finished successfully Nov 1 00:44:26.262174 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:44:26.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.264758 systemd[1]: Starting ignition-fetch.service... Nov 1 00:44:26.274353 ignition[1130]: Ignition 2.14.0 Nov 1 00:44:26.274366 ignition[1130]: Stage: fetch Nov 1 00:44:26.274567 ignition[1130]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:44:26.274599 ignition[1130]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:44:26.282313 ignition[1130]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:44:26.283353 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:44:26.307134 ignition[1130]: INFO : PUT result: OK Nov 1 00:44:26.309393 ignition[1130]: DEBUG : parsed url from cmdline: "" Nov 1 00:44:26.309393 ignition[1130]: INFO : no config URL provided Nov 1 00:44:26.309393 ignition[1130]: INFO : reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:44:26.309393 ignition[1130]: INFO : no config at "/usr/lib/ignition/user.ign" Nov 1 00:44:26.312625 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:44:26.312625 ignition[1130]: INFO : PUT result: OK Nov 1 00:44:26.312625 ignition[1130]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Nov 1 00:44:26.312625 ignition[1130]: INFO : GET result: OK Nov 1 00:44:26.312625 ignition[1130]: DEBUG : parsing config with SHA512: 52591bc141583103f858fb6017edc6ed0daef9914ab44d45c0ceb3e78ce3aefb369f2bfe626dbce856513fa3783bbcda8f537942cf1d1d65dab444b23d10079f Nov 1 00:44:26.318513 unknown[1130]: fetched base config from "system" Nov 1 00:44:26.318531 unknown[1130]: fetched base config from "system" Nov 1 00:44:26.318549 unknown[1130]: fetched user config from "aws" Nov 1 00:44:26.320281 ignition[1130]: fetch: fetch complete Nov 1 00:44:26.320290 ignition[1130]: fetch: fetch passed Nov 1 00:44:26.322289 systemd[1]: Finished ignition-fetch.service. Nov 1 00:44:26.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.320366 ignition[1130]: Ignition finished successfully Nov 1 00:44:26.324353 systemd[1]: Starting ignition-kargs.service... Nov 1 00:44:26.335982 ignition[1136]: Ignition 2.14.0 Nov 1 00:44:26.335995 ignition[1136]: Stage: kargs Nov 1 00:44:26.336207 ignition[1136]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:44:26.336240 ignition[1136]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:44:26.343580 ignition[1136]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:44:26.344334 ignition[1136]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:44:26.349899 ignition[1136]: INFO : PUT result: OK Nov 1 00:44:26.352855 ignition[1136]: kargs: kargs passed Nov 1 00:44:26.352926 ignition[1136]: Ignition finished successfully Nov 1 00:44:26.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.354823 systemd[1]: Finished ignition-kargs.service. Nov 1 00:44:26.356410 systemd[1]: Starting ignition-disks.service... Nov 1 00:44:26.365623 ignition[1142]: Ignition 2.14.0 Nov 1 00:44:26.365637 ignition[1142]: Stage: disks Nov 1 00:44:26.365851 ignition[1142]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:44:26.365886 ignition[1142]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:44:26.373327 ignition[1142]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:44:26.374175 ignition[1142]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:44:26.374876 ignition[1142]: INFO : PUT result: OK Nov 1 00:44:26.376858 ignition[1142]: disks: disks passed Nov 1 00:44:26.376949 ignition[1142]: Ignition finished successfully Nov 1 00:44:26.378353 systemd[1]: Finished ignition-disks.service. Nov 1 00:44:26.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.379514 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:44:26.380343 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:44:26.381269 systemd[1]: Reached target local-fs.target. Nov 1 00:44:26.382214 systemd[1]: Reached target sysinit.target. Nov 1 00:44:26.383120 systemd[1]: Reached target basic.target. Nov 1 00:44:26.385340 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:44:26.416782 systemd-fsck[1150]: ROOT: clean, 637/553520 files, 56032/553472 blocks Nov 1 00:44:26.419771 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:44:26.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.421446 systemd[1]: Mounting sysroot.mount... Nov 1 00:44:26.440374 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:44:26.440808 systemd[1]: Mounted sysroot.mount. Nov 1 00:44:26.441454 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:44:26.450282 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:44:26.453397 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Nov 1 00:44:26.453988 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:44:26.454029 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:44:26.457041 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:44:26.461245 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:44:26.475412 initrd-setup-root[1171]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:44:26.500967 initrd-setup-root[1179]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:44:26.507423 initrd-setup-root[1187]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:44:26.512322 initrd-setup-root[1195]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:44:26.573173 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:44:26.591935 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1203) Nov 1 00:44:26.595635 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:44:26.595696 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:44:26.595710 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:44:26.604953 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:44:26.608214 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:44:26.650113 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:44:26.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.651694 systemd[1]: Starting ignition-mount.service... Nov 1 00:44:26.652923 systemd[1]: Starting sysroot-boot.service... Nov 1 00:44:26.661237 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Nov 1 00:44:26.661340 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Nov 1 00:44:26.676542 ignition[1232]: INFO : Ignition 2.14.0 Nov 1 00:44:26.677857 ignition[1232]: INFO : Stage: mount Nov 1 00:44:26.679177 ignition[1232]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:44:26.681937 ignition[1232]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:44:26.691860 ignition[1232]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:44:26.692897 ignition[1232]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:44:26.695020 ignition[1232]: INFO : PUT result: OK Nov 1 00:44:26.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.698328 systemd[1]: Finished sysroot-boot.service. Nov 1 00:44:26.700325 ignition[1232]: INFO : mount: mount passed Nov 1 00:44:26.700325 ignition[1232]: INFO : Ignition finished successfully Nov 1 00:44:26.701889 systemd[1]: Finished ignition-mount.service. Nov 1 00:44:26.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:26.703800 systemd[1]: Starting ignition-files.service... Nov 1 00:44:26.711985 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:44:26.729939 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1242) Nov 1 00:44:26.733762 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:44:26.733817 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:44:26.733831 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:44:26.748938 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:44:26.752639 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:44:26.763719 ignition[1261]: INFO : Ignition 2.14.0 Nov 1 00:44:26.763719 ignition[1261]: INFO : Stage: files Nov 1 00:44:26.766074 ignition[1261]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:44:26.766074 ignition[1261]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:44:26.772615 ignition[1261]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:44:26.773503 ignition[1261]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:44:26.774314 ignition[1261]: INFO : PUT result: OK Nov 1 00:44:26.777809 ignition[1261]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:44:26.782977 ignition[1261]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:44:26.782977 ignition[1261]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:44:26.804141 ignition[1261]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:44:26.805698 ignition[1261]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:44:26.805698 ignition[1261]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:44:26.805589 unknown[1261]: wrote ssh authorized keys file for user: core Nov 1 00:44:26.809638 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Nov 1 00:44:26.809638 ignition[1261]: INFO : GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Nov 1 00:44:26.911581 ignition[1261]: INFO : GET result: OK Nov 1 00:44:27.165967 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Nov 1 00:44:27.167753 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Nov 1 00:44:27.170087 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:44:27.177009 ignition[1261]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3520100050" Nov 1 00:44:27.178506 ignition[1261]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3520100050": device or resource busy Nov 1 00:44:27.178506 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3520100050", trying btrfs: device or resource busy Nov 1 00:44:27.178506 ignition[1261]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3520100050" Nov 1 00:44:27.183127 ignition[1261]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3520100050" Nov 1 00:44:27.189552 ignition[1261]: INFO : op(3): [started] unmounting "/mnt/oem3520100050" Nov 1 00:44:27.189552 ignition[1261]: INFO : op(3): [finished] unmounting "/mnt/oem3520100050" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.34.1-x86-64.raw" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.34.1-x86-64.raw" Nov 1 00:44:27.191246 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Nov 1 00:44:27.191246 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:44:27.214322 ignition[1261]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem76705045" Nov 1 00:44:27.214322 ignition[1261]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem76705045": device or resource busy Nov 1 00:44:27.214322 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem76705045", trying btrfs: device or resource busy Nov 1 00:44:27.214322 ignition[1261]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem76705045" Nov 1 00:44:27.214322 ignition[1261]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem76705045" Nov 1 00:44:27.214322 ignition[1261]: INFO : op(6): [started] unmounting "/mnt/oem76705045" Nov 1 00:44:27.214322 ignition[1261]: INFO : op(6): [finished] unmounting "/mnt/oem76705045" Nov 1 00:44:27.214322 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Nov 1 00:44:27.214322 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Nov 1 00:44:27.214322 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:44:27.214322 ignition[1261]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem434689046" Nov 1 00:44:27.214322 ignition[1261]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem434689046": device or resource busy Nov 1 00:44:27.214322 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem434689046", trying btrfs: device or resource busy Nov 1 00:44:27.214322 ignition[1261]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem434689046" Nov 1 00:44:27.214322 ignition[1261]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem434689046" Nov 1 00:44:27.214322 ignition[1261]: INFO : op(9): [started] unmounting "/mnt/oem434689046" Nov 1 00:44:27.214322 ignition[1261]: INFO : op(9): [finished] unmounting "/mnt/oem434689046" Nov 1 00:44:27.214322 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Nov 1 00:44:27.214322 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:44:27.214322 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:44:27.214322 ignition[1261]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem99358466" Nov 1 00:44:27.241143 ignition[1261]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem99358466": device or resource busy Nov 1 00:44:27.241143 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem99358466", trying btrfs: device or resource busy Nov 1 00:44:27.241143 ignition[1261]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem99358466" Nov 1 00:44:27.241143 ignition[1261]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem99358466" Nov 1 00:44:27.241143 ignition[1261]: INFO : op(c): [started] unmounting "/mnt/oem99358466" Nov 1 00:44:27.241143 ignition[1261]: INFO : op(c): [finished] unmounting "/mnt/oem99358466" Nov 1 00:44:27.241143 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:44:27.241143 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.34.1-x86-64.raw" Nov 1 00:44:27.241143 ignition[1261]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.34.1-x86-64.raw: attempt #1 Nov 1 00:44:27.277109 systemd-networkd[1106]: eth0: Gained IPv6LL Nov 1 00:44:27.615868 ignition[1261]: INFO : GET result: OK Nov 1 00:44:27.960069 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.34.1-x86-64.raw" Nov 1 00:44:27.960069 ignition[1261]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Nov 1 00:44:27.960069 ignition[1261]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Nov 1 00:44:27.960069 ignition[1261]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(12): [started] processing unit "nvidia.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(12): [finished] processing unit "nvidia.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:44:27.969723 ignition[1261]: INFO : files: files passed Nov 1 00:44:27.969723 ignition[1261]: INFO : Ignition finished successfully Nov 1 00:44:28.055731 kernel: kauditd_printk_skb: 26 callbacks suppressed Nov 1 00:44:28.055768 kernel: audit: type=1130 audit(1761957867.974:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.055791 kernel: audit: type=1130 audit(1761957867.995:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.055812 kernel: audit: type=1131 audit(1761957867.995:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.055841 kernel: audit: type=1130 audit(1761957868.009:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.055862 kernel: audit: type=1130 audit(1761957868.042:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.055882 kernel: audit: type=1131 audit(1761957868.042:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:27.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:27.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:27.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:27.972263 systemd[1]: Finished ignition-files.service. Nov 1 00:44:27.983309 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:44:28.061644 initrd-setup-root-after-ignition[1287]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:44:27.987962 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:44:27.989090 systemd[1]: Starting ignition-quench.service... Nov 1 00:44:27.994461 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:44:27.994600 systemd[1]: Finished ignition-quench.service. Nov 1 00:44:28.006484 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:44:28.010988 systemd[1]: Reached target ignition-complete.target. Nov 1 00:44:28.019533 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:44:28.042449 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:44:28.042581 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:44:28.085230 kernel: audit: type=1130 audit(1761957868.075:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.043646 systemd[1]: Reached target initrd-fs.target. Nov 1 00:44:28.054937 systemd[1]: Reached target initrd.target. Nov 1 00:44:28.056856 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:44:28.058169 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:44:28.074887 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:44:28.077443 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:44:28.094240 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:44:28.095665 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:44:28.096957 systemd[1]: Stopped target timers.target. Nov 1 00:44:28.098102 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:44:28.104572 kernel: audit: type=1131 audit(1761957868.098:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.098310 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:44:28.099672 systemd[1]: Stopped target initrd.target. Nov 1 00:44:28.105452 systemd[1]: Stopped target basic.target. Nov 1 00:44:28.106679 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:44:28.107960 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:44:28.109149 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:44:28.110289 systemd[1]: Stopped target remote-fs.target. Nov 1 00:44:28.111571 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:44:28.112756 systemd[1]: Stopped target sysinit.target. Nov 1 00:44:28.113924 systemd[1]: Stopped target local-fs.target. Nov 1 00:44:28.115047 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:44:28.116268 systemd[1]: Stopped target swap.target. Nov 1 00:44:28.123621 kernel: audit: type=1131 audit(1761957868.117:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.117354 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:44:28.117556 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:44:28.130808 kernel: audit: type=1131 audit(1761957868.124:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.118729 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:44:28.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.124365 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:44:28.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.124579 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:44:28.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.125809 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:44:28.126040 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:44:28.131804 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:44:28.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.132044 systemd[1]: Stopped ignition-files.service. Nov 1 00:44:28.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.134334 systemd[1]: Stopping ignition-mount.service... Nov 1 00:44:28.135740 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:44:28.135927 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:44:28.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.138407 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:44:28.139750 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:44:28.142091 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:44:28.144671 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:44:28.144867 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:44:28.153192 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:44:28.153324 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:44:28.163887 ignition[1300]: INFO : Ignition 2.14.0 Nov 1 00:44:28.163887 ignition[1300]: INFO : Stage: umount Nov 1 00:44:28.163887 ignition[1300]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:44:28.167881 ignition[1300]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:44:28.170464 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:44:28.178655 ignition[1300]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:44:28.178896 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:44:28.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.179040 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:44:28.182009 ignition[1300]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:44:28.182009 ignition[1300]: INFO : PUT result: OK Nov 1 00:44:28.184059 ignition[1300]: INFO : umount: umount passed Nov 1 00:44:28.184667 ignition[1300]: INFO : Ignition finished successfully Nov 1 00:44:28.186097 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:44:28.186223 systemd[1]: Stopped ignition-mount.service. Nov 1 00:44:28.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.187545 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:44:28.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.187611 systemd[1]: Stopped ignition-disks.service. Nov 1 00:44:28.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.188654 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:44:28.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.188711 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:44:28.189804 systemd[1]: ignition-fetch.service: Deactivated successfully. Nov 1 00:44:28.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.189859 systemd[1]: Stopped ignition-fetch.service. Nov 1 00:44:28.191011 systemd[1]: Stopped target network.target. Nov 1 00:44:28.192136 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:44:28.192198 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:44:28.193320 systemd[1]: Stopped target paths.target. Nov 1 00:44:28.194390 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:44:28.195965 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:44:28.196779 systemd[1]: Stopped target slices.target. Nov 1 00:44:28.197862 systemd[1]: Stopped target sockets.target. Nov 1 00:44:28.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.199021 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:44:28.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.199067 systemd[1]: Closed iscsid.socket. Nov 1 00:44:28.200301 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:44:28.200339 systemd[1]: Closed iscsiuio.socket. Nov 1 00:44:28.201429 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:44:28.201492 systemd[1]: Stopped ignition-setup.service. Nov 1 00:44:28.202589 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:44:28.202647 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:44:28.204116 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:44:28.205116 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:44:28.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.207973 systemd-networkd[1106]: eth0: DHCPv6 lease lost Nov 1 00:44:28.210787 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:44:28.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.213000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:44:28.210954 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:44:28.215000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:44:28.212731 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:44:28.212866 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:44:28.214618 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:44:28.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.214661 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:44:28.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.216649 systemd[1]: Stopping network-cleanup.service... Nov 1 00:44:28.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.218778 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:44:28.218856 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:44:28.220083 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:44:28.220141 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:44:28.221342 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:44:28.221399 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:44:28.222517 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:44:28.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.231443 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:44:28.232365 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:44:28.232546 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:44:28.234862 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:44:28.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.234943 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:44:28.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.237052 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:44:28.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.237103 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:44:28.239053 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:44:28.239118 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:44:28.240329 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:44:28.240386 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:44:28.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:28.241467 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:44:28.241519 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:44:28.243722 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:44:28.250147 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:44:28.250236 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:44:28.251979 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:44:28.252121 systemd[1]: Stopped network-cleanup.service. Nov 1 00:44:28.253176 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:44:28.253265 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:44:28.253965 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:44:28.264071 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:44:28.272626 systemd[1]: Switching root. Nov 1 00:44:28.294601 systemd-journald[185]: Journal stopped Nov 1 00:44:33.496181 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Nov 1 00:44:33.496277 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:44:33.496299 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:44:33.496318 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:44:33.496335 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:44:33.496354 kernel: SELinux: policy capability open_perms=1 Nov 1 00:44:33.496371 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:44:33.496399 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:44:33.496419 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:44:33.496436 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:44:33.496453 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:44:33.496470 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:44:33.496489 systemd[1]: Successfully loaded SELinux policy in 94.281ms. Nov 1 00:44:33.496522 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.386ms. Nov 1 00:44:33.496543 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:44:33.496562 systemd[1]: Detected virtualization amazon. Nov 1 00:44:33.496582 systemd[1]: Detected architecture x86-64. Nov 1 00:44:33.496600 systemd[1]: Detected first boot. Nov 1 00:44:33.496623 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:44:33.496641 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:44:33.496658 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:44:33.496677 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:44:33.496696 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:44:33.496719 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:44:33.496739 kernel: kauditd_printk_skb: 46 callbacks suppressed Nov 1 00:44:33.496757 kernel: audit: type=1334 audit(1761957873.237:86): prog-id=12 op=LOAD Nov 1 00:44:33.496775 kernel: audit: type=1334 audit(1761957873.237:87): prog-id=3 op=UNLOAD Nov 1 00:44:33.496793 kernel: audit: type=1334 audit(1761957873.238:88): prog-id=13 op=LOAD Nov 1 00:44:33.496811 kernel: audit: type=1334 audit(1761957873.240:89): prog-id=14 op=LOAD Nov 1 00:44:33.496829 kernel: audit: type=1334 audit(1761957873.240:90): prog-id=4 op=UNLOAD Nov 1 00:44:33.496849 kernel: audit: type=1334 audit(1761957873.240:91): prog-id=5 op=UNLOAD Nov 1 00:44:33.496866 kernel: audit: type=1334 audit(1761957873.243:92): prog-id=15 op=LOAD Nov 1 00:44:33.496883 kernel: audit: type=1334 audit(1761957873.243:93): prog-id=12 op=UNLOAD Nov 1 00:44:33.496899 kernel: audit: type=1334 audit(1761957873.244:94): prog-id=16 op=LOAD Nov 1 00:44:33.502215 kernel: audit: type=1334 audit(1761957873.246:95): prog-id=17 op=LOAD Nov 1 00:44:33.502244 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:44:33.502271 systemd[1]: Stopped iscsiuio.service. Nov 1 00:44:33.502292 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:44:33.502313 systemd[1]: Stopped iscsid.service. Nov 1 00:44:33.502339 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:44:33.502360 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:44:33.502381 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:44:33.502404 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:44:33.502425 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:44:33.502446 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Nov 1 00:44:33.502473 systemd[1]: Created slice system-getty.slice. Nov 1 00:44:33.502496 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:44:33.502517 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:44:33.502538 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:44:33.502558 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:44:33.502578 systemd[1]: Created slice user.slice. Nov 1 00:44:33.502599 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:44:33.502619 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:44:33.502640 systemd[1]: Set up automount boot.automount. Nov 1 00:44:33.502661 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:44:33.502685 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:44:33.502706 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:44:33.502728 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:44:33.502750 systemd[1]: Reached target integritysetup.target. Nov 1 00:44:33.502771 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:44:33.502792 systemd[1]: Reached target remote-fs.target. Nov 1 00:44:33.502813 systemd[1]: Reached target slices.target. Nov 1 00:44:33.502834 systemd[1]: Reached target swap.target. Nov 1 00:44:33.502853 systemd[1]: Reached target torcx.target. Nov 1 00:44:33.502877 systemd[1]: Reached target veritysetup.target. Nov 1 00:44:33.502922 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:44:33.502947 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:44:33.502968 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:44:33.502988 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:44:33.503010 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:44:33.503026 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:44:33.503045 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:44:33.503064 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:44:33.503083 systemd[1]: Mounting media.mount... Nov 1 00:44:33.503112 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:44:33.503133 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:44:33.503153 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:44:33.503172 systemd[1]: Mounting tmp.mount... Nov 1 00:44:33.503191 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:44:33.503213 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:44:33.503232 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:44:33.503251 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:44:33.503270 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:44:33.503288 systemd[1]: Starting modprobe@drm.service... Nov 1 00:44:33.503306 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:44:33.503324 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:44:33.503343 systemd[1]: Starting modprobe@loop.service... Nov 1 00:44:33.503362 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:44:33.503384 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:44:33.503403 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:44:33.503421 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:44:33.503441 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:44:33.503460 systemd[1]: Stopped systemd-journald.service. Nov 1 00:44:33.503479 kernel: fuse: init (API version 7.34) Nov 1 00:44:33.503497 kernel: loop: module loaded Nov 1 00:44:33.503515 systemd[1]: Starting systemd-journald.service... Nov 1 00:44:33.503534 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:44:33.503555 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:44:33.503573 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:44:33.503593 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:44:33.503611 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:44:33.503631 systemd[1]: Stopped verity-setup.service. Nov 1 00:44:33.503650 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:44:33.503669 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:44:33.503688 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:44:33.503706 systemd[1]: Mounted media.mount. Nov 1 00:44:33.503731 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:44:33.503750 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:44:33.503768 systemd[1]: Mounted tmp.mount. Nov 1 00:44:33.503786 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:44:33.503812 systemd-journald[1411]: Journal started Nov 1 00:44:33.503895 systemd-journald[1411]: Runtime Journal (/run/log/journal/ec22a9d49550225b8a021eafd8df02ea) is 4.8M, max 38.3M, 33.5M free. Nov 1 00:44:28.975000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:44:29.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:44:29.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:44:29.108000 audit: BPF prog-id=10 op=LOAD Nov 1 00:44:29.108000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:44:29.108000 audit: BPF prog-id=11 op=LOAD Nov 1 00:44:29.108000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:44:29.317000 audit[1333]: AVC avc: denied { associate } for pid=1333 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:44:29.317000 audit[1333]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8a2 a1=c0000cede0 a2=c0000d70c0 a3=32 items=0 ppid=1316 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:29.317000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:44:29.321000 audit[1333]: AVC avc: denied { associate } for pid=1333 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:44:29.321000 audit[1333]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d979 a2=1ed a3=0 items=2 ppid=1316 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:29.321000 audit: CWD cwd="/" Nov 1 00:44:29.321000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:29.321000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:29.321000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:44:33.237000 audit: BPF prog-id=12 op=LOAD Nov 1 00:44:33.237000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:44:33.238000 audit: BPF prog-id=13 op=LOAD Nov 1 00:44:33.240000 audit: BPF prog-id=14 op=LOAD Nov 1 00:44:33.240000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:44:33.240000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:44:33.243000 audit: BPF prog-id=15 op=LOAD Nov 1 00:44:33.243000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:44:33.244000 audit: BPF prog-id=16 op=LOAD Nov 1 00:44:33.246000 audit: BPF prog-id=17 op=LOAD Nov 1 00:44:33.246000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:44:33.246000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:44:33.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.254000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:44:33.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.429000 audit: BPF prog-id=18 op=LOAD Nov 1 00:44:33.429000 audit: BPF prog-id=19 op=LOAD Nov 1 00:44:33.429000 audit: BPF prog-id=20 op=LOAD Nov 1 00:44:33.430000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:44:33.430000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:44:33.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.493000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:44:33.493000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffc7c7d8200 a2=4000 a3=7ffc7c7d829c items=0 ppid=1 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:33.493000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:44:33.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:29.302250 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:44:33.236543 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:44:29.303355 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:44:33.236557 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Nov 1 00:44:29.303390 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:44:33.248026 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:44:29.303432 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:44:29.303448 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:44:29.303485 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:44:29.303498 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:44:29.303700 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:44:29.303741 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:44:29.303754 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:44:29.306015 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:44:33.513027 systemd[1]: Started systemd-journald.service. Nov 1 00:44:33.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:29.306073 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:44:29.306103 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:44:29.306126 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:44:29.306154 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:44:29.306176 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:44:32.734550 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:32Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:44:33.513885 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:44:32.734811 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:32Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:44:33.514101 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:44:32.734988 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:32Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:44:32.735389 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:32Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:44:32.735443 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:32Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:44:32.735506 /usr/lib/systemd/system-generators/torcx-generator[1333]: time="2025-11-01T00:44:32Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:44:33.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.515774 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:44:33.515976 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:44:33.517280 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:44:33.517436 systemd[1]: Finished modprobe@drm.service. Nov 1 00:44:33.518876 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:44:33.519065 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:44:33.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.522426 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:44:33.522621 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:44:33.523861 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:44:33.524160 systemd[1]: Finished modprobe@loop.service. Nov 1 00:44:33.525376 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:44:33.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.528742 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:44:33.530039 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:44:33.531544 systemd[1]: Reached target network-pre.target. Nov 1 00:44:33.536654 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:44:33.539086 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:44:33.543866 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:44:33.547074 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:44:33.550373 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:44:33.551257 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:44:33.554130 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:44:33.555075 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:44:33.556688 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:44:33.560851 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:44:33.563475 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:44:33.577036 systemd-journald[1411]: Time spent on flushing to /var/log/journal/ec22a9d49550225b8a021eafd8df02ea is 64.462ms for 1218 entries. Nov 1 00:44:33.577036 systemd-journald[1411]: System Journal (/var/log/journal/ec22a9d49550225b8a021eafd8df02ea) is 8.0M, max 195.6M, 187.6M free. Nov 1 00:44:33.661535 systemd-journald[1411]: Received client request to flush runtime journal. Nov 1 00:44:33.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.582129 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:44:33.583177 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:44:33.663074 udevadm[1450]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Nov 1 00:44:33.589029 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:44:33.591082 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:44:33.607097 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:44:33.643263 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:44:33.645618 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:44:33.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.662714 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:44:33.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:33.761882 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:44:34.221225 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:44:34.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.221000 audit: BPF prog-id=21 op=LOAD Nov 1 00:44:34.221000 audit: BPF prog-id=22 op=LOAD Nov 1 00:44:34.221000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:44:34.221000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:44:34.223011 systemd[1]: Starting systemd-udevd.service... Nov 1 00:44:34.241061 systemd-udevd[1452]: Using default interface naming scheme 'v252'. Nov 1 00:44:34.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.302000 audit: BPF prog-id=23 op=LOAD Nov 1 00:44:34.301891 systemd[1]: Started systemd-udevd.service. Nov 1 00:44:34.304208 systemd[1]: Starting systemd-networkd.service... Nov 1 00:44:34.328634 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Nov 1 00:44:34.329000 audit: BPF prog-id=24 op=LOAD Nov 1 00:44:34.329000 audit: BPF prog-id=25 op=LOAD Nov 1 00:44:34.329000 audit: BPF prog-id=26 op=LOAD Nov 1 00:44:34.331198 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:44:34.364018 (udev-worker)[1454]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:44:34.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.373401 systemd[1]: Started systemd-userdbd.service. Nov 1 00:44:34.401000 audit[1459]: AVC avc: denied { confidentiality } for pid=1459 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:44:34.401000 audit[1459]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55de52195980 a1=338ec a2=7f05995ecbc5 a3=5 items=110 ppid=1452 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:34.401000 audit: CWD cwd="/" Nov 1 00:44:34.401000 audit: PATH item=0 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=1 name=(null) inode=13964 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=2 name=(null) inode=13964 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.410928 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Nov 1 00:44:34.401000 audit: PATH item=3 name=(null) inode=13965 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=4 name=(null) inode=13964 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=5 name=(null) inode=13966 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=6 name=(null) inode=13964 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=7 name=(null) inode=13967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=8 name=(null) inode=13967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=9 name=(null) inode=13968 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=10 name=(null) inode=13967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=11 name=(null) inode=13969 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=12 name=(null) inode=13967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=13 name=(null) inode=13970 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=14 name=(null) inode=13967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=15 name=(null) inode=13971 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=16 name=(null) inode=13967 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=17 name=(null) inode=13972 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=18 name=(null) inode=13964 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=19 name=(null) inode=13973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=20 name=(null) inode=13973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=21 name=(null) inode=13974 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=22 name=(null) inode=13973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=23 name=(null) inode=13975 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=24 name=(null) inode=13973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=25 name=(null) inode=13976 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=26 name=(null) inode=13973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=27 name=(null) inode=13977 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=28 name=(null) inode=13973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=29 name=(null) inode=13978 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=30 name=(null) inode=13964 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=31 name=(null) inode=13979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=32 name=(null) inode=13979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=33 name=(null) inode=13980 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=34 name=(null) inode=13979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=35 name=(null) inode=13981 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=36 name=(null) inode=13979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=37 name=(null) inode=13982 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=38 name=(null) inode=13979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=39 name=(null) inode=13983 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=40 name=(null) inode=13979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=41 name=(null) inode=13984 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=42 name=(null) inode=13964 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=43 name=(null) inode=13985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=44 name=(null) inode=13985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=45 name=(null) inode=13986 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=46 name=(null) inode=13985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=47 name=(null) inode=13987 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=48 name=(null) inode=13985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=49 name=(null) inode=13988 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=50 name=(null) inode=13985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=51 name=(null) inode=13989 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=52 name=(null) inode=13985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=53 name=(null) inode=13990 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=54 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=55 name=(null) inode=13991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=56 name=(null) inode=13991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=57 name=(null) inode=13992 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=58 name=(null) inode=13991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=59 name=(null) inode=13993 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=60 name=(null) inode=13991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=61 name=(null) inode=13994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=62 name=(null) inode=13994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=63 name=(null) inode=13995 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=64 name=(null) inode=13994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=65 name=(null) inode=13996 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=66 name=(null) inode=13994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=67 name=(null) inode=13997 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=68 name=(null) inode=13994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=69 name=(null) inode=13998 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=70 name=(null) inode=13994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=71 name=(null) inode=13999 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=72 name=(null) inode=13991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=73 name=(null) inode=14000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=74 name=(null) inode=14000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=75 name=(null) inode=14001 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=76 name=(null) inode=14000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=77 name=(null) inode=14002 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=78 name=(null) inode=14000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=79 name=(null) inode=14003 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=80 name=(null) inode=14000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=81 name=(null) inode=14004 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=82 name=(null) inode=14000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=83 name=(null) inode=14005 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=84 name=(null) inode=13991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=85 name=(null) inode=14006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=86 name=(null) inode=14006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=87 name=(null) inode=14007 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=88 name=(null) inode=14006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=89 name=(null) inode=14008 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=90 name=(null) inode=14006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=91 name=(null) inode=14009 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=92 name=(null) inode=14006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=93 name=(null) inode=14010 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=94 name=(null) inode=14006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=95 name=(null) inode=14011 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=96 name=(null) inode=13991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=97 name=(null) inode=14012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=98 name=(null) inode=14012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=99 name=(null) inode=14013 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=100 name=(null) inode=14012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=101 name=(null) inode=14014 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=102 name=(null) inode=14012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=103 name=(null) inode=14015 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=104 name=(null) inode=14012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=105 name=(null) inode=14016 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=106 name=(null) inode=14012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=107 name=(null) inode=14017 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PATH item=109 name=(null) inode=14987 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:44:34.401000 audit: PROCTITLE proctitle="(udev-worker)" Nov 1 00:44:34.419951 kernel: ACPI: button: Power Button [PWRF] Nov 1 00:44:34.423131 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Nov 1 00:44:34.436324 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Nov 1 00:44:34.436731 kernel: ACPI: button: Sleep Button [SLPF] Nov 1 00:44:34.463010 kernel: piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr Nov 1 00:44:34.496934 kernel: mousedev: PS/2 mouse device common for all mice Nov 1 00:44:34.520840 systemd-networkd[1460]: lo: Link UP Nov 1 00:44:34.520851 systemd-networkd[1460]: lo: Gained carrier Nov 1 00:44:34.521328 systemd-networkd[1460]: Enumeration completed Nov 1 00:44:34.521434 systemd[1]: Started systemd-networkd.service. Nov 1 00:44:34.522081 systemd-networkd[1460]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:44:34.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.523512 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:44:34.526953 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:44:34.527610 systemd-networkd[1460]: eth0: Link UP Nov 1 00:44:34.527782 systemd-networkd[1460]: eth0: Gained carrier Nov 1 00:44:34.539203 systemd-networkd[1460]: eth0: DHCPv4 address 172.31.16.197/20, gateway 172.31.16.1 acquired from 172.31.16.1 Nov 1 00:44:34.607502 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:44:34.613407 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:44:34.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.615448 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:44:34.687698 lvm[1566]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:44:34.715441 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:44:34.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.716196 systemd[1]: Reached target cryptsetup.target. Nov 1 00:44:34.718039 systemd[1]: Starting lvm2-activation.service... Nov 1 00:44:34.723208 lvm[1567]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:44:34.743321 systemd[1]: Finished lvm2-activation.service. Nov 1 00:44:34.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.744085 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:44:34.744632 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:44:34.744673 systemd[1]: Reached target local-fs.target. Nov 1 00:44:34.745259 systemd[1]: Reached target machines.target. Nov 1 00:44:34.747105 systemd[1]: Starting ldconfig.service... Nov 1 00:44:34.749825 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:44:34.749951 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:44:34.751453 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:44:34.753525 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:44:34.755770 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:44:34.761231 systemd[1]: Starting systemd-sysext.service... Nov 1 00:44:34.768408 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1569 (bootctl) Nov 1 00:44:34.770328 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:44:34.788635 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:44:34.796007 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:44:34.796300 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:44:34.812941 kernel: loop0: detected capacity change from 0 to 219144 Nov 1 00:44:34.820533 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:44:34.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.982463 systemd-fsck[1580]: fsck.fat 4.2 (2021-01-31) Nov 1 00:44:34.982463 systemd-fsck[1580]: /dev/nvme0n1p1: 790 files, 120773/258078 clusters Nov 1 00:44:34.985128 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:44:34.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:34.987476 systemd[1]: Mounting boot.mount... Nov 1 00:44:35.007662 systemd[1]: Mounted boot.mount. Nov 1 00:44:35.056329 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:44:35.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.087953 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:44:35.131940 kernel: loop1: detected capacity change from 0 to 219144 Nov 1 00:44:35.135716 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:44:35.136359 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:44:35.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.153794 (sd-sysext)[1595]: Using extensions 'kubernetes'. Nov 1 00:44:35.154368 (sd-sysext)[1595]: Merged extensions into '/usr'. Nov 1 00:44:35.174376 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:44:35.176275 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:44:35.177146 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.178936 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:44:35.183787 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:44:35.186200 systemd[1]: Starting modprobe@loop.service... Nov 1 00:44:35.187570 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.187782 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:44:35.188017 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:44:35.192529 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:44:35.193641 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:44:35.193827 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:44:35.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.194793 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:44:35.195024 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:44:35.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.196046 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:44:35.196196 systemd[1]: Finished modprobe@loop.service. Nov 1 00:44:35.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.197389 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:44:35.197550 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.198882 systemd[1]: Finished systemd-sysext.service. Nov 1 00:44:35.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.200799 systemd[1]: Starting ensure-sysext.service... Nov 1 00:44:35.203125 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:44:35.212614 systemd[1]: Reloading. Nov 1 00:44:35.246982 systemd-tmpfiles[1602]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:44:35.288650 /usr/lib/systemd/system-generators/torcx-generator[1621]: time="2025-11-01T00:44:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:44:35.288693 /usr/lib/systemd/system-generators/torcx-generator[1621]: time="2025-11-01T00:44:35Z" level=info msg="torcx already run" Nov 1 00:44:35.291454 systemd-tmpfiles[1602]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:44:35.312805 systemd-tmpfiles[1602]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:44:35.432397 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:44:35.432419 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:44:35.460238 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:44:35.581000 audit: BPF prog-id=27 op=LOAD Nov 1 00:44:35.581000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:44:35.581000 audit: BPF prog-id=28 op=LOAD Nov 1 00:44:35.581000 audit: BPF prog-id=29 op=LOAD Nov 1 00:44:35.581000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:44:35.581000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:44:35.582000 audit: BPF prog-id=30 op=LOAD Nov 1 00:44:35.582000 audit: BPF prog-id=31 op=LOAD Nov 1 00:44:35.582000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:44:35.582000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:44:35.584000 audit: BPF prog-id=32 op=LOAD Nov 1 00:44:35.584000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:44:35.585000 audit: BPF prog-id=33 op=LOAD Nov 1 00:44:35.585000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:44:35.585000 audit: BPF prog-id=34 op=LOAD Nov 1 00:44:35.585000 audit: BPF prog-id=35 op=LOAD Nov 1 00:44:35.585000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:44:35.585000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:44:35.604122 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.606367 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:44:35.608874 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:44:35.612032 systemd[1]: Starting modprobe@loop.service... Nov 1 00:44:35.613517 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.613723 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:44:35.615274 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:44:35.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.615486 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:44:35.616829 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:44:35.617070 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:44:35.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.618575 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:44:35.618772 systemd[1]: Finished modprobe@loop.service. Nov 1 00:44:35.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.625434 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:44:35.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.630476 systemd[1]: Starting audit-rules.service... Nov 1 00:44:35.633046 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:44:35.634180 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.636247 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:44:35.638688 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:44:35.643394 systemd[1]: Starting modprobe@loop.service... Nov 1 00:44:35.646076 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.646270 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:44:35.648146 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:44:35.649000 audit: BPF prog-id=36 op=LOAD Nov 1 00:44:35.652000 audit: BPF prog-id=37 op=LOAD Nov 1 00:44:35.651516 systemd[1]: Starting systemd-resolved.service... Nov 1 00:44:35.655229 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:44:35.659628 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:44:35.662596 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:44:35.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.665717 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:44:35.665928 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:44:35.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.667346 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:44:35.667529 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:44:35.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.669537 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:44:35.669708 systemd[1]: Finished modprobe@loop.service. Nov 1 00:44:35.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.671252 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:44:35.671415 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.671532 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:44:35.674000 audit[1690]: SYSTEM_BOOT pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.684091 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.688453 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:44:35.690988 systemd[1]: Starting modprobe@drm.service... Nov 1 00:44:35.696343 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:44:35.698744 systemd[1]: Starting modprobe@loop.service... Nov 1 00:44:35.699598 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.699881 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:44:35.700194 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:44:35.702488 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:44:35.702676 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:44:35.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.705992 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:44:35.706172 systemd[1]: Finished modprobe@drm.service. Nov 1 00:44:35.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.709776 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:44:35.709957 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:44:35.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.711171 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:44:35.711347 systemd[1]: Finished modprobe@loop.service. Nov 1 00:44:35.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.716247 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:44:35.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.719611 systemd[1]: Finished ensure-sysext.service. Nov 1 00:44:35.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.720350 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:44:35.720405 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:44:35.774512 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:44:35.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:35.796622 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:44:35.796655 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:44:35.812000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:44:35.812000 audit[1708]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff127c22e0 a2=420 a3=0 items=0 ppid=1681 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:35.812000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:44:35.813501 augenrules[1708]: No rules Nov 1 00:44:35.814533 systemd[1]: Finished audit-rules.service. Nov 1 00:44:35.815351 systemd-resolved[1687]: Positive Trust Anchors: Nov 1 00:44:35.815366 systemd-resolved[1687]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:44:35.815653 systemd-resolved[1687]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:44:35.823453 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:44:35.823981 systemd[1]: Reached target time-set.target. Nov 1 00:44:35.856517 systemd-resolved[1687]: Defaulting to hostname 'linux'. Nov 1 00:44:35.858603 systemd[1]: Started systemd-resolved.service. Nov 1 00:44:35.859061 systemd[1]: Reached target network.target. Nov 1 00:44:35.859551 systemd[1]: Reached target nss-lookup.target. Nov 1 00:44:36.545869 systemd-resolved[1687]: Clock change detected. Flushing caches. Nov 1 00:44:36.545997 systemd-timesyncd[1688]: Contacted time server 155.248.196.28:123 (0.flatcar.pool.ntp.org). Nov 1 00:44:36.546241 systemd-timesyncd[1688]: Initial clock synchronization to Sat 2025-11-01 00:44:36.545783 UTC. Nov 1 00:44:36.806528 ldconfig[1568]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:44:36.812715 systemd[1]: Finished ldconfig.service. Nov 1 00:44:36.814680 systemd[1]: Starting systemd-update-done.service... Nov 1 00:44:36.822832 systemd[1]: Finished systemd-update-done.service. Nov 1 00:44:36.823408 systemd[1]: Reached target sysinit.target. Nov 1 00:44:36.824049 systemd[1]: Started motdgen.path. Nov 1 00:44:36.824538 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:44:36.825122 systemd[1]: Started logrotate.timer. Nov 1 00:44:36.825582 systemd[1]: Started mdadm.timer. Nov 1 00:44:36.825976 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:44:36.826352 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:44:36.826392 systemd[1]: Reached target paths.target. Nov 1 00:44:36.826785 systemd[1]: Reached target timers.target. Nov 1 00:44:36.827463 systemd[1]: Listening on dbus.socket. Nov 1 00:44:36.829197 systemd[1]: Starting docker.socket... Nov 1 00:44:36.833532 systemd[1]: Listening on sshd.socket. Nov 1 00:44:36.834204 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:44:36.834847 systemd[1]: Listening on docker.socket. Nov 1 00:44:36.835368 systemd[1]: Reached target sockets.target. Nov 1 00:44:36.835776 systemd[1]: Reached target basic.target. Nov 1 00:44:36.836370 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:44:36.836407 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:44:36.837623 systemd[1]: Starting containerd.service... Nov 1 00:44:36.839652 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Nov 1 00:44:36.842200 systemd[1]: Starting dbus.service... Nov 1 00:44:36.844183 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:44:36.846882 systemd[1]: Starting extend-filesystems.service... Nov 1 00:44:36.848638 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:44:36.852181 systemd[1]: Starting motdgen.service... Nov 1 00:44:36.871804 jq[1720]: false Nov 1 00:44:36.855829 systemd[1]: Starting prepare-helm.service... Nov 1 00:44:36.858247 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:44:36.862002 systemd[1]: Starting sshd-keygen.service... Nov 1 00:44:36.868700 systemd[1]: Starting systemd-logind.service... Nov 1 00:44:36.869388 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:44:36.869494 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:44:36.870570 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:44:36.902955 jq[1731]: true Nov 1 00:44:36.874337 systemd[1]: Starting update-engine.service... Nov 1 00:44:36.879961 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:44:36.883038 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:44:36.883307 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:44:36.884902 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:44:36.885159 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:44:36.920182 tar[1734]: linux-amd64/LICENSE Nov 1 00:44:36.920182 tar[1734]: linux-amd64/helm Nov 1 00:44:36.922233 jq[1737]: true Nov 1 00:44:36.949192 dbus-daemon[1719]: [system] SELinux support is enabled Nov 1 00:44:36.949414 systemd[1]: Started dbus.service. Nov 1 00:44:36.953291 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:44:36.953563 systemd[1]: Reached target system-config.target. Nov 1 00:44:36.954277 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:44:36.954304 systemd[1]: Reached target user-config.target. Nov 1 00:44:36.965075 extend-filesystems[1721]: Found loop1 Nov 1 00:44:36.966056 extend-filesystems[1721]: Found nvme0n1 Nov 1 00:44:36.966056 extend-filesystems[1721]: Found nvme0n1p1 Nov 1 00:44:36.966056 extend-filesystems[1721]: Found nvme0n1p2 Nov 1 00:44:36.966056 extend-filesystems[1721]: Found nvme0n1p3 Nov 1 00:44:36.966056 extend-filesystems[1721]: Found usr Nov 1 00:44:36.966056 extend-filesystems[1721]: Found nvme0n1p4 Nov 1 00:44:36.966056 extend-filesystems[1721]: Found nvme0n1p6 Nov 1 00:44:36.966056 extend-filesystems[1721]: Found nvme0n1p7 Nov 1 00:44:36.966056 extend-filesystems[1721]: Found nvme0n1p9 Nov 1 00:44:36.966056 extend-filesystems[1721]: Checking size of /dev/nvme0n1p9 Nov 1 00:44:36.970712 systemd-networkd[1460]: eth0: Gained IPv6LL Nov 1 00:44:36.992179 dbus-daemon[1719]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1460 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Nov 1 00:44:36.973927 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:44:36.974700 systemd[1]: Reached target network-online.target. Nov 1 00:44:36.977001 systemd[1]: Started amazon-ssm-agent.service. Nov 1 00:44:36.982158 systemd[1]: Starting kubelet.service... Nov 1 00:44:36.985013 systemd[1]: Started nvidia.service. Nov 1 00:44:37.000701 systemd[1]: Starting systemd-hostnamed.service... Nov 1 00:44:37.076793 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:44:37.077033 systemd[1]: Finished motdgen.service. Nov 1 00:44:37.117211 extend-filesystems[1721]: Resized partition /dev/nvme0n1p9 Nov 1 00:44:37.136429 extend-filesystems[1774]: resize2fs 1.46.5 (30-Dec-2021) Nov 1 00:44:37.145798 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 3587067 blocks Nov 1 00:44:37.304635 update_engine[1728]: I1101 00:44:37.304086 1728 main.cc:92] Flatcar Update Engine starting Nov 1 00:44:37.319870 systemd[1]: Started update-engine.service. Nov 1 00:44:37.329253 update_engine[1728]: I1101 00:44:37.324347 1728 update_check_scheduler.cc:74] Next update check in 11m50s Nov 1 00:44:37.329352 amazon-ssm-agent[1754]: 2025/11/01 00:44:37 Failed to load instance info from vault. RegistrationKey does not exist. Nov 1 00:44:37.322836 systemd[1]: Started locksmithd.service. Nov 1 00:44:37.332445 env[1736]: time="2025-11-01T00:44:37.329997026Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:44:37.339350 amazon-ssm-agent[1754]: Initializing new seelog logger Nov 1 00:44:37.339350 amazon-ssm-agent[1754]: New Seelog Logger Creation Complete Nov 1 00:44:37.339350 amazon-ssm-agent[1754]: 2025/11/01 00:44:37 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Nov 1 00:44:37.339350 amazon-ssm-agent[1754]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Nov 1 00:44:37.341012 amazon-ssm-agent[1754]: 2025/11/01 00:44:37 processing appconfig overrides Nov 1 00:44:37.351482 bash[1790]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:44:37.351991 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:44:37.364250 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 3587067 Nov 1 00:44:37.378825 extend-filesystems[1774]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Nov 1 00:44:37.378825 extend-filesystems[1774]: old_desc_blocks = 1, new_desc_blocks = 2 Nov 1 00:44:37.378825 extend-filesystems[1774]: The filesystem on /dev/nvme0n1p9 is now 3587067 (4k) blocks long. Nov 1 00:44:37.390057 extend-filesystems[1721]: Resized filesystem in /dev/nvme0n1p9 Nov 1 00:44:37.389912 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:44:37.391287 systemd[1]: Finished extend-filesystems.service. Nov 1 00:44:37.392925 systemd-logind[1726]: Watching system buttons on /dev/input/event1 (Power Button) Nov 1 00:44:37.392953 systemd-logind[1726]: Watching system buttons on /dev/input/event2 (Sleep Button) Nov 1 00:44:37.392980 systemd-logind[1726]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 1 00:44:37.397582 systemd-logind[1726]: New seat seat0. Nov 1 00:44:37.412686 systemd[1]: Started systemd-logind.service. Nov 1 00:44:37.535231 systemd[1]: nvidia.service: Deactivated successfully. Nov 1 00:44:37.547725 env[1736]: time="2025-11-01T00:44:37.547631028Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:44:37.548424 env[1736]: time="2025-11-01T00:44:37.548390219Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:44:37.557926 env[1736]: time="2025-11-01T00:44:37.557864057Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:44:37.558103 env[1736]: time="2025-11-01T00:44:37.558079788Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:44:37.558572 env[1736]: time="2025-11-01T00:44:37.558542731Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:44:37.558699 env[1736]: time="2025-11-01T00:44:37.558680509Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:44:37.558825 env[1736]: time="2025-11-01T00:44:37.558805515Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:44:37.558916 env[1736]: time="2025-11-01T00:44:37.558900799Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:44:37.559142 env[1736]: time="2025-11-01T00:44:37.559112448Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:44:37.559607 env[1736]: time="2025-11-01T00:44:37.559576571Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:44:37.559997 env[1736]: time="2025-11-01T00:44:37.559954100Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:44:37.560107 env[1736]: time="2025-11-01T00:44:37.560090094Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:44:37.560280 env[1736]: time="2025-11-01T00:44:37.560259945Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:44:37.560392 env[1736]: time="2025-11-01T00:44:37.560376891Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:44:37.567017 env[1736]: time="2025-11-01T00:44:37.566972475Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:44:37.567180 env[1736]: time="2025-11-01T00:44:37.567160329Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:44:37.567292 env[1736]: time="2025-11-01T00:44:37.567274415Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:44:37.567424 env[1736]: time="2025-11-01T00:44:37.567408468Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.567588 env[1736]: time="2025-11-01T00:44:37.567555544Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.567718 env[1736]: time="2025-11-01T00:44:37.567700405Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.567823 env[1736]: time="2025-11-01T00:44:37.567807432Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.567921 env[1736]: time="2025-11-01T00:44:37.567905284Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.568028 env[1736]: time="2025-11-01T00:44:37.568011808Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.568106 env[1736]: time="2025-11-01T00:44:37.568090785Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.568221 env[1736]: time="2025-11-01T00:44:37.568204865Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.568298 env[1736]: time="2025-11-01T00:44:37.568283931Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:44:37.568501 env[1736]: time="2025-11-01T00:44:37.568482185Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:44:37.568681 env[1736]: time="2025-11-01T00:44:37.568663752Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:44:37.569254 env[1736]: time="2025-11-01T00:44:37.569229773Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:44:37.569385 env[1736]: time="2025-11-01T00:44:37.569365992Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.569492 env[1736]: time="2025-11-01T00:44:37.569456525Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:44:37.569662 env[1736]: time="2025-11-01T00:44:37.569645018Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.569832 env[1736]: time="2025-11-01T00:44:37.569813909Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.569917 env[1736]: time="2025-11-01T00:44:37.569901748Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.571219 env[1736]: time="2025-11-01T00:44:37.571192297Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.573159 env[1736]: time="2025-11-01T00:44:37.573132731Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.573273 env[1736]: time="2025-11-01T00:44:37.573256036Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.573362 env[1736]: time="2025-11-01T00:44:37.573346981Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.573433 env[1736]: time="2025-11-01T00:44:37.573420401Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.573529 env[1736]: time="2025-11-01T00:44:37.573513272Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:44:37.573852 env[1736]: time="2025-11-01T00:44:37.573830917Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.575321 env[1736]: time="2025-11-01T00:44:37.575295043Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.575428 env[1736]: time="2025-11-01T00:44:37.575410774Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.575516 env[1736]: time="2025-11-01T00:44:37.575500301Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:44:37.575600 env[1736]: time="2025-11-01T00:44:37.575581646Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:44:37.575666 env[1736]: time="2025-11-01T00:44:37.575652823Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:44:37.575768 env[1736]: time="2025-11-01T00:44:37.575732628Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:44:37.575904 env[1736]: time="2025-11-01T00:44:37.575868547Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:44:37.576341 env[1736]: time="2025-11-01T00:44:37.576267605Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:44:37.580435 env[1736]: time="2025-11-01T00:44:37.576856711Z" level=info msg="Connect containerd service" Nov 1 00:44:37.580435 env[1736]: time="2025-11-01T00:44:37.576914111Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:44:37.587990 env[1736]: time="2025-11-01T00:44:37.587939096Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:44:37.588525 env[1736]: time="2025-11-01T00:44:37.588494389Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:44:37.590077 env[1736]: time="2025-11-01T00:44:37.590042367Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:44:37.590331 systemd[1]: Started containerd.service. Nov 1 00:44:37.592972 env[1736]: time="2025-11-01T00:44:37.592939838Z" level=info msg="containerd successfully booted in 0.338426s" Nov 1 00:44:37.593577 env[1736]: time="2025-11-01T00:44:37.593520261Z" level=info msg="Start subscribing containerd event" Nov 1 00:44:37.593717 env[1736]: time="2025-11-01T00:44:37.593699512Z" level=info msg="Start recovering state" Nov 1 00:44:37.593903 env[1736]: time="2025-11-01T00:44:37.593886781Z" level=info msg="Start event monitor" Nov 1 00:44:37.594007 env[1736]: time="2025-11-01T00:44:37.593992311Z" level=info msg="Start snapshots syncer" Nov 1 00:44:37.598015 env[1736]: time="2025-11-01T00:44:37.597976428Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:44:37.598178 env[1736]: time="2025-11-01T00:44:37.598158107Z" level=info msg="Start streaming server" Nov 1 00:44:37.636041 dbus-daemon[1719]: [system] Successfully activated service 'org.freedesktop.hostname1' Nov 1 00:44:37.636232 systemd[1]: Started systemd-hostnamed.service. Nov 1 00:44:37.638468 dbus-daemon[1719]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1760 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Nov 1 00:44:37.642443 systemd[1]: Starting polkit.service... Nov 1 00:44:37.659713 coreos-metadata[1718]: Nov 01 00:44:37.659 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Nov 1 00:44:37.664543 coreos-metadata[1718]: Nov 01 00:44:37.664 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Nov 1 00:44:37.665667 coreos-metadata[1718]: Nov 01 00:44:37.665 INFO Fetch successful Nov 1 00:44:37.665667 coreos-metadata[1718]: Nov 01 00:44:37.665 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Nov 1 00:44:37.669614 coreos-metadata[1718]: Nov 01 00:44:37.669 INFO Fetch successful Nov 1 00:44:37.673118 unknown[1718]: wrote ssh authorized keys file for user: core Nov 1 00:44:37.677905 polkitd[1852]: Started polkitd version 121 Nov 1 00:44:37.701667 polkitd[1852]: Loading rules from directory /etc/polkit-1/rules.d Nov 1 00:44:37.701768 polkitd[1852]: Loading rules from directory /usr/share/polkit-1/rules.d Nov 1 00:44:37.706507 polkitd[1852]: Finished loading, compiling and executing 2 rules Nov 1 00:44:37.707920 update-ssh-keys[1854]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:44:37.708628 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Nov 1 00:44:37.711868 dbus-daemon[1719]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Nov 1 00:44:37.712075 systemd[1]: Started polkit.service. Nov 1 00:44:37.715615 polkitd[1852]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Nov 1 00:44:37.748427 systemd-hostnamed[1760]: Hostname set to (transient) Nov 1 00:44:37.748561 systemd-resolved[1687]: System hostname changed to 'ip-172-31-16-197'. Nov 1 00:44:37.942181 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Create new startup processor Nov 1 00:44:37.942357 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [LongRunningPluginsManager] registered plugins: {} Nov 1 00:44:37.942419 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Initializing bookkeeping folders Nov 1 00:44:37.942419 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO removing the completed state files Nov 1 00:44:37.942419 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Initializing bookkeeping folders for long running plugins Nov 1 00:44:37.942419 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Initializing healthcheck folders for long running plugins Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Initializing locations for inventory plugin Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Initializing default location for custom inventory Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Initializing default location for file inventory Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Initializing default location for role inventory Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Init the cloudwatchlogs publisher Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:configurePackage Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:runDocument Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:updateSsmAgent Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:configureDocker Nov 1 00:44:37.942566 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:runDockerAction Nov 1 00:44:37.942959 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:refreshAssociation Nov 1 00:44:37.942959 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:softwareInventory Nov 1 00:44:37.942959 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:runPowerShellScript Nov 1 00:44:37.942959 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform independent plugin aws:downloadContent Nov 1 00:44:37.942959 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Successfully loaded platform dependent plugin aws:runShellScript Nov 1 00:44:37.942959 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Nov 1 00:44:37.942959 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO OS: linux, Arch: amd64 Nov 1 00:44:37.943512 amazon-ssm-agent[1754]: datastore file /var/lib/amazon/ssm/i-0fe7578d1b70fd632/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Nov 1 00:44:37.948604 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] Starting document processing engine... Nov 1 00:44:38.044666 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] [EngineProcessor] Starting Nov 1 00:44:38.139819 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Nov 1 00:44:38.234284 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] Starting message polling Nov 1 00:44:38.328979 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] Starting send replies to MDS Nov 1 00:44:38.423869 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [instanceID=i-0fe7578d1b70fd632] Starting association polling Nov 1 00:44:38.452598 tar[1734]: linux-amd64/README.md Nov 1 00:44:38.460661 systemd[1]: Finished prepare-helm.service. Nov 1 00:44:38.520583 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Nov 1 00:44:38.614788 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] [Association] Launching response handler Nov 1 00:44:38.645963 locksmithd[1802]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:44:38.709786 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Nov 1 00:44:38.805541 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Nov 1 00:44:38.901376 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Nov 1 00:44:38.997465 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [OfflineService] Starting document processing engine... Nov 1 00:44:39.093798 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [OfflineService] [EngineProcessor] Starting Nov 1 00:44:39.191382 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [OfflineService] [EngineProcessor] Initial processing Nov 1 00:44:39.288056 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [OfflineService] Starting message polling Nov 1 00:44:39.384984 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [OfflineService] Starting send replies to MDS Nov 1 00:44:39.400307 sshd_keygen[1751]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:44:39.429798 systemd[1]: Finished sshd-keygen.service. Nov 1 00:44:39.432309 systemd[1]: Starting issuegen.service... Nov 1 00:44:39.438740 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:44:39.438941 systemd[1]: Finished issuegen.service. Nov 1 00:44:39.441428 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:44:39.449562 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:44:39.452050 systemd[1]: Started getty@tty1.service. Nov 1 00:44:39.454196 systemd[1]: Started serial-getty@ttyS0.service. Nov 1 00:44:39.455120 systemd[1]: Reached target getty.target. Nov 1 00:44:39.481988 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [LongRunningPluginsManager] starting long running plugin manager Nov 1 00:44:39.546500 systemd[1]: Started kubelet.service. Nov 1 00:44:39.547492 systemd[1]: Reached target multi-user.target. Nov 1 00:44:39.549704 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:44:39.559569 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:44:39.559840 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:44:39.560958 systemd[1]: Startup finished in 612ms (kernel) + 6.092s (initrd) + 10.034s (userspace) = 16.740s. Nov 1 00:44:39.579254 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Nov 1 00:44:39.676802 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [HealthCheck] HealthCheck reporting agent health. Nov 1 00:44:39.774418 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessageGatewayService] Starting session document processing engine... Nov 1 00:44:39.872304 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessageGatewayService] [EngineProcessor] Starting Nov 1 00:44:39.970280 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Nov 1 00:44:40.068619 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0fe7578d1b70fd632, requestId: 0845c14e-f09b-42a2-872e-f4b64bf0f09a Nov 1 00:44:40.167037 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Nov 1 00:44:40.265715 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [MessageGatewayService] listening reply. Nov 1 00:44:40.364459 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [StartupProcessor] Executing startup processor tasks Nov 1 00:44:40.439162 kubelet[1931]: E1101 00:44:40.439106 1931 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:44:40.441151 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:44:40.441288 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:44:40.441511 systemd[1]: kubelet.service: Consumed 1.118s CPU time. Nov 1 00:44:40.463573 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Nov 1 00:44:40.562810 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Nov 1 00:44:40.662196 amazon-ssm-agent[1754]: 2025-11-01 00:44:37 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Nov 1 00:44:40.761846 amazon-ssm-agent[1754]: 2025-11-01 00:44:38 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0fe7578d1b70fd632?role=subscribe&stream=input Nov 1 00:44:40.861731 amazon-ssm-agent[1754]: 2025-11-01 00:44:38 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0fe7578d1b70fd632?role=subscribe&stream=input Nov 1 00:44:40.961708 amazon-ssm-agent[1754]: 2025-11-01 00:44:38 INFO [MessageGatewayService] Starting receiving message from control channel Nov 1 00:44:41.061924 amazon-ssm-agent[1754]: 2025-11-01 00:44:38 INFO [MessageGatewayService] [EngineProcessor] Initial processing Nov 1 00:44:46.856883 systemd[1]: Created slice system-sshd.slice. Nov 1 00:44:46.858096 systemd[1]: Started sshd@0-172.31.16.197:22-147.75.109.163:48364.service. Nov 1 00:44:47.031436 sshd[1938]: Accepted publickey for core from 147.75.109.163 port 48364 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:44:47.034737 sshd[1938]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:44:47.050020 systemd[1]: Created slice user-500.slice. Nov 1 00:44:47.051673 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:44:47.057856 systemd-logind[1726]: New session 1 of user core. Nov 1 00:44:47.064519 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:44:47.066809 systemd[1]: Starting user@500.service... Nov 1 00:44:47.071361 (systemd)[1941]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:44:47.163801 systemd[1941]: Queued start job for default target default.target. Nov 1 00:44:47.164573 systemd[1941]: Reached target paths.target. Nov 1 00:44:47.164609 systemd[1941]: Reached target sockets.target. Nov 1 00:44:47.164629 systemd[1941]: Reached target timers.target. Nov 1 00:44:47.164647 systemd[1941]: Reached target basic.target. Nov 1 00:44:47.164795 systemd[1]: Started user@500.service. Nov 1 00:44:47.166035 systemd[1]: Started session-1.scope. Nov 1 00:44:47.166825 systemd[1941]: Reached target default.target. Nov 1 00:44:47.167035 systemd[1941]: Startup finished in 88ms. Nov 1 00:44:47.314738 systemd[1]: Started sshd@1-172.31.16.197:22-147.75.109.163:48374.service. Nov 1 00:44:47.478877 sshd[1950]: Accepted publickey for core from 147.75.109.163 port 48374 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:44:47.480453 sshd[1950]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:44:47.484962 systemd-logind[1726]: New session 2 of user core. Nov 1 00:44:47.485390 systemd[1]: Started session-2.scope. Nov 1 00:44:47.617112 sshd[1950]: pam_unix(sshd:session): session closed for user core Nov 1 00:44:47.619672 systemd[1]: sshd@1-172.31.16.197:22-147.75.109.163:48374.service: Deactivated successfully. Nov 1 00:44:47.620736 systemd[1]: session-2.scope: Deactivated successfully. Nov 1 00:44:47.621414 systemd-logind[1726]: Session 2 logged out. Waiting for processes to exit. Nov 1 00:44:47.622383 systemd-logind[1726]: Removed session 2. Nov 1 00:44:47.640864 systemd[1]: Started sshd@2-172.31.16.197:22-147.75.109.163:48378.service. Nov 1 00:44:47.808550 sshd[1956]: Accepted publickey for core from 147.75.109.163 port 48378 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:44:47.810346 sshd[1956]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:44:47.815439 systemd-logind[1726]: New session 3 of user core. Nov 1 00:44:47.816225 systemd[1]: Started session-3.scope. Nov 1 00:44:47.931779 sshd[1956]: pam_unix(sshd:session): session closed for user core Nov 1 00:44:47.934655 systemd[1]: sshd@2-172.31.16.197:22-147.75.109.163:48378.service: Deactivated successfully. Nov 1 00:44:47.935969 systemd[1]: session-3.scope: Deactivated successfully. Nov 1 00:44:47.936709 systemd-logind[1726]: Session 3 logged out. Waiting for processes to exit. Nov 1 00:44:47.937639 systemd-logind[1726]: Removed session 3. Nov 1 00:44:47.956570 systemd[1]: Started sshd@3-172.31.16.197:22-147.75.109.163:48392.service. Nov 1 00:44:48.112434 sshd[1962]: Accepted publickey for core from 147.75.109.163 port 48392 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:44:48.114069 sshd[1962]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:44:48.118690 systemd-logind[1726]: New session 4 of user core. Nov 1 00:44:48.120111 systemd[1]: Started session-4.scope. Nov 1 00:44:48.244881 sshd[1962]: pam_unix(sshd:session): session closed for user core Nov 1 00:44:48.247540 systemd[1]: sshd@3-172.31.16.197:22-147.75.109.163:48392.service: Deactivated successfully. Nov 1 00:44:48.248417 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:44:48.248984 systemd-logind[1726]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:44:48.249678 systemd-logind[1726]: Removed session 4. Nov 1 00:44:48.270780 systemd[1]: Started sshd@4-172.31.16.197:22-147.75.109.163:48408.service. Nov 1 00:44:48.428005 sshd[1968]: Accepted publickey for core from 147.75.109.163 port 48408 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:44:48.429725 sshd[1968]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:44:48.434996 systemd-logind[1726]: New session 5 of user core. Nov 1 00:44:48.435630 systemd[1]: Started session-5.scope. Nov 1 00:44:48.555039 sudo[1971]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:44:48.555286 sudo[1971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:44:48.564063 dbus-daemon[1719]: \xd0\xed\xc0\x80\x8fU: received setenforce notice (enforcing=-964650560) Nov 1 00:44:48.565862 sudo[1971]: pam_unix(sudo:session): session closed for user root Nov 1 00:44:48.589998 sshd[1968]: pam_unix(sshd:session): session closed for user core Nov 1 00:44:48.593303 systemd[1]: sshd@4-172.31.16.197:22-147.75.109.163:48408.service: Deactivated successfully. Nov 1 00:44:48.594079 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:44:48.594648 systemd-logind[1726]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:44:48.595513 systemd-logind[1726]: Removed session 5. Nov 1 00:44:48.614475 systemd[1]: Started sshd@5-172.31.16.197:22-147.75.109.163:48422.service. Nov 1 00:44:48.767336 sshd[1975]: Accepted publickey for core from 147.75.109.163 port 48422 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:44:48.768961 sshd[1975]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:44:48.774713 systemd[1]: Started session-6.scope. Nov 1 00:44:48.775436 systemd-logind[1726]: New session 6 of user core. Nov 1 00:44:48.875990 sudo[1979]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:44:48.876319 sudo[1979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:44:48.879527 sudo[1979]: pam_unix(sudo:session): session closed for user root Nov 1 00:44:48.885021 sudo[1978]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:44:48.885338 sudo[1978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:44:48.895765 systemd[1]: Stopping audit-rules.service... Nov 1 00:44:48.897624 auditctl[1982]: No rules Nov 1 00:44:48.895000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:44:48.898304 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:44:48.899005 kernel: kauditd_printk_skb: 233 callbacks suppressed Nov 1 00:44:48.899064 kernel: audit: type=1305 audit(1761957888.895:212): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:44:48.898510 systemd[1]: Stopped audit-rules.service. Nov 1 00:44:48.902740 systemd[1]: Starting audit-rules.service... Nov 1 00:44:48.895000 audit[1982]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffec032cc10 a2=420 a3=0 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:48.912543 kernel: audit: type=1300 audit(1761957888.895:212): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffec032cc10 a2=420 a3=0 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:48.912627 kernel: audit: type=1327 audit(1761957888.895:212): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:44:48.895000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:44:48.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.917784 kernel: audit: type=1131 audit(1761957888.896:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.928123 augenrules[1999]: No rules Nov 1 00:44:48.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.928800 systemd[1]: Finished audit-rules.service. Nov 1 00:44:48.929821 sudo[1978]: pam_unix(sudo:session): session closed for user root Nov 1 00:44:48.928000 audit[1978]: USER_END pid=1978 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.938576 kernel: audit: type=1130 audit(1761957888.927:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.938687 kernel: audit: type=1106 audit(1761957888.928:215): pid=1978 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.938742 kernel: audit: type=1104 audit(1761957888.928:216): pid=1978 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.928000 audit[1978]: CRED_DISP pid=1978 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.951498 sshd[1975]: pam_unix(sshd:session): session closed for user core Nov 1 00:44:48.951000 audit[1975]: USER_END pid=1975 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:44:48.954499 systemd[1]: sshd@5-172.31.16.197:22-147.75.109.163:48422.service: Deactivated successfully. Nov 1 00:44:48.955199 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:44:48.951000 audit[1975]: CRED_DISP pid=1975 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:44:48.956975 systemd-logind[1726]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:44:48.957815 systemd-logind[1726]: Removed session 6. Nov 1 00:44:48.961739 kernel: audit: type=1106 audit(1761957888.951:217): pid=1975 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:44:48.961851 kernel: audit: type=1104 audit(1761957888.951:218): pid=1975 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:44:48.961873 kernel: audit: type=1131 audit(1761957888.952:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.16.197:22-147.75.109.163:48422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.16.197:22-147.75.109.163:48422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.197:22-147.75.109.163:48428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:48.977393 systemd[1]: Started sshd@6-172.31.16.197:22-147.75.109.163:48428.service. Nov 1 00:44:49.132000 audit[2005]: USER_ACCT pid=2005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:44:49.134889 sshd[2005]: Accepted publickey for core from 147.75.109.163 port 48428 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:44:49.134000 audit[2005]: CRED_ACQ pid=2005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:44:49.134000 audit[2005]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe28e64b60 a2=3 a3=0 items=0 ppid=1 pid=2005 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.134000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:44:49.136631 sshd[2005]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:44:49.142266 systemd[1]: Started session-7.scope. Nov 1 00:44:49.142953 systemd-logind[1726]: New session 7 of user core. Nov 1 00:44:49.146000 audit[2005]: USER_START pid=2005 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:44:49.148000 audit[2007]: CRED_ACQ pid=2007 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:44:49.244000 audit[2008]: USER_ACCT pid=2008 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:44:49.246530 sudo[2008]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:44:49.244000 audit[2008]: CRED_REFR pid=2008 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:44:49.246991 sudo[2008]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:44:49.247000 audit[2008]: USER_START pid=2008 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:44:49.276150 systemd[1]: Starting docker.service... Nov 1 00:44:49.320893 env[2018]: time="2025-11-01T00:44:49.320831639Z" level=info msg="Starting up" Nov 1 00:44:49.322269 env[2018]: time="2025-11-01T00:44:49.322236678Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:44:49.322269 env[2018]: time="2025-11-01T00:44:49.322265612Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:44:49.322418 env[2018]: time="2025-11-01T00:44:49.322290607Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:44:49.322418 env[2018]: time="2025-11-01T00:44:49.322304908Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:44:49.324637 env[2018]: time="2025-11-01T00:44:49.324613454Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:44:49.324784 env[2018]: time="2025-11-01T00:44:49.324765904Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:44:49.324854 env[2018]: time="2025-11-01T00:44:49.324841852Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:44:49.324897 env[2018]: time="2025-11-01T00:44:49.324888351Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:44:49.372036 env[2018]: time="2025-11-01T00:44:49.371992852Z" level=info msg="Loading containers: start." Nov 1 00:44:49.476000 audit[2048]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.476000 audit[2048]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffca2d41de0 a2=0 a3=7ffca2d41dcc items=0 ppid=2018 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.476000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:44:49.478000 audit[2050]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.478000 audit[2050]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffecfd0fa50 a2=0 a3=7ffecfd0fa3c items=0 ppid=2018 pid=2050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.478000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:44:49.480000 audit[2052]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.480000 audit[2052]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffec0936110 a2=0 a3=7ffec09360fc items=0 ppid=2018 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.480000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:44:49.482000 audit[2054]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.482000 audit[2054]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff91d20c00 a2=0 a3=7fff91d20bec items=0 ppid=2018 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.482000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:44:49.485000 audit[2056]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.485000 audit[2056]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe755e05b0 a2=0 a3=7ffe755e059c items=0 ppid=2018 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:44:49.503000 audit[2061]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.503000 audit[2061]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd7fe23500 a2=0 a3=7ffd7fe234ec items=0 ppid=2018 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.503000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:44:49.512000 audit[2063]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.512000 audit[2063]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffc62b9480 a2=0 a3=7fffc62b946c items=0 ppid=2018 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.512000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:44:49.515000 audit[2065]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.515000 audit[2065]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff0099c7b0 a2=0 a3=7fff0099c79c items=0 ppid=2018 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.515000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:44:49.517000 audit[2067]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.517000 audit[2067]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe24f72ab0 a2=0 a3=7ffe24f72a9c items=0 ppid=2018 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.517000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:44:49.526000 audit[2071]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.526000 audit[2071]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffda5d20b10 a2=0 a3=7ffda5d20afc items=0 ppid=2018 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.526000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:44:49.531000 audit[2072]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.531000 audit[2072]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd8570dca0 a2=0 a3=7ffd8570dc8c items=0 ppid=2018 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.531000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:44:49.545865 kernel: Initializing XFRM netlink socket Nov 1 00:44:49.598996 env[2018]: time="2025-11-01T00:44:49.598949483Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:44:49.600183 (udev-worker)[2028]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:44:49.625000 audit[2080]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.625000 audit[2080]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fffc77fbd20 a2=0 a3=7fffc77fbd0c items=0 ppid=2018 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.625000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:44:49.637000 audit[2083]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.637000 audit[2083]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc1abe51a0 a2=0 a3=7ffc1abe518c items=0 ppid=2018 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.637000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:44:49.641000 audit[2086]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.641000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff19293d20 a2=0 a3=7fff19293d0c items=0 ppid=2018 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.641000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:44:49.643000 audit[2088]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.643000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffff90c7be0 a2=0 a3=7ffff90c7bcc items=0 ppid=2018 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.643000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:44:49.646000 audit[2090]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.646000 audit[2090]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff4f1790d0 a2=0 a3=7fff4f1790bc items=0 ppid=2018 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.646000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:44:49.648000 audit[2092]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.648000 audit[2092]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffdb9b323d0 a2=0 a3=7ffdb9b323bc items=0 ppid=2018 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.648000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:44:49.650000 audit[2094]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.650000 audit[2094]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe72b5b750 a2=0 a3=7ffe72b5b73c items=0 ppid=2018 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.650000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:44:49.667000 audit[2097]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.667000 audit[2097]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc2073b110 a2=0 a3=7ffc2073b0fc items=0 ppid=2018 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:44:49.669000 audit[2099]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.669000 audit[2099]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff860a1ae0 a2=0 a3=7fff860a1acc items=0 ppid=2018 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.669000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:44:49.672000 audit[2101]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2101 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.672000 audit[2101]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdf33fc2a0 a2=0 a3=7ffdf33fc28c items=0 ppid=2018 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.672000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:44:49.674000 audit[2103]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.674000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe9608ba10 a2=0 a3=7ffe9608b9fc items=0 ppid=2018 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.674000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:44:49.677241 systemd-networkd[1460]: docker0: Link UP Nov 1 00:44:49.686000 audit[2107]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.686000 audit[2107]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff00846600 a2=0 a3=7fff008465ec items=0 ppid=2018 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.686000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:44:49.691000 audit[2108]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:44:49.691000 audit[2108]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffec3215e70 a2=0 a3=7ffec3215e5c items=0 ppid=2018 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:49.691000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:44:49.693737 env[2018]: time="2025-11-01T00:44:49.693701822Z" level=info msg="Loading containers: done." Nov 1 00:44:49.712262 env[2018]: time="2025-11-01T00:44:49.712194933Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:44:49.712485 env[2018]: time="2025-11-01T00:44:49.712399257Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:44:49.712525 env[2018]: time="2025-11-01T00:44:49.712499323Z" level=info msg="Daemon has completed initialization" Nov 1 00:44:49.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:49.732878 systemd[1]: Started docker.service. Nov 1 00:44:49.739511 env[2018]: time="2025-11-01T00:44:49.739418711Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:44:50.461052 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:44:50.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:50.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:50.461238 systemd[1]: Stopped kubelet.service. Nov 1 00:44:50.461299 systemd[1]: kubelet.service: Consumed 1.118s CPU time. Nov 1 00:44:50.462782 systemd[1]: Starting kubelet.service... Nov 1 00:44:50.744937 systemd[1]: Started kubelet.service. Nov 1 00:44:50.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:44:50.795417 kubelet[2144]: E1101 00:44:50.795378 2144 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:44:50.798709 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:44:50.798870 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:44:50.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:44:50.866020 env[1736]: time="2025-11-01T00:44:50.865979106Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.34.1\"" Nov 1 00:44:51.479487 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount176342264.mount: Deactivated successfully. Nov 1 00:44:52.928305 env[1736]: time="2025-11-01T00:44:52.928239499Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.34.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:52.930452 env[1736]: time="2025-11-01T00:44:52.930409807Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c3994bc6961024917ec0aeee02e62828108c21a52d87648e30f3080d9cbadc97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:52.932448 env[1736]: time="2025-11-01T00:44:52.932413451Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.34.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:52.934647 env[1736]: time="2025-11-01T00:44:52.934583094Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:b9d7c117f8ac52bed4b13aeed973dc5198f9d93a926e6fe9e0b384f155baa902,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:52.935658 env[1736]: time="2025-11-01T00:44:52.935618059Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.34.1\" returns image reference \"sha256:c3994bc6961024917ec0aeee02e62828108c21a52d87648e30f3080d9cbadc97\"" Nov 1 00:44:52.936733 env[1736]: time="2025-11-01T00:44:52.936703865Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.34.1\"" Nov 1 00:44:54.454614 env[1736]: time="2025-11-01T00:44:54.454549568Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.34.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:54.456802 env[1736]: time="2025-11-01T00:44:54.456738075Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c80c8dbafe7dd71fc21527912a6dd20ccd1b71f3e561a5c28337388d0619538f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:54.458842 env[1736]: time="2025-11-01T00:44:54.458801135Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.34.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:54.460781 env[1736]: time="2025-11-01T00:44:54.460723169Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2bf47c1b01f51e8963bf2327390883c9fa4ed03ea1b284500a2cba17ce303e89,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:54.461715 env[1736]: time="2025-11-01T00:44:54.461679356Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.34.1\" returns image reference \"sha256:c80c8dbafe7dd71fc21527912a6dd20ccd1b71f3e561a5c28337388d0619538f\"" Nov 1 00:44:54.462411 env[1736]: time="2025-11-01T00:44:54.462385839Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.34.1\"" Nov 1 00:44:55.718771 env[1736]: time="2025-11-01T00:44:55.718700627Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.34.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:55.721577 env[1736]: time="2025-11-01T00:44:55.721530542Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7dd6aaa1717ab7eaae4578503e4c4d9965fcf5a249e8155fe16379ee9b6cb813,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:55.723595 env[1736]: time="2025-11-01T00:44:55.723556089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.34.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:55.725045 env[1736]: time="2025-11-01T00:44:55.725012797Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6e9fbc4e25a576483e6a233976353a66e4d77eb5d0530e9118e94b7d46fb3500,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:55.725949 env[1736]: time="2025-11-01T00:44:55.725915449Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.34.1\" returns image reference \"sha256:7dd6aaa1717ab7eaae4578503e4c4d9965fcf5a249e8155fe16379ee9b6cb813\"" Nov 1 00:44:55.726525 env[1736]: time="2025-11-01T00:44:55.726507087Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.34.1\"" Nov 1 00:44:55.756511 amazon-ssm-agent[1754]: 2025-11-01 00:44:55 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Nov 1 00:44:56.859396 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1960747835.mount: Deactivated successfully. Nov 1 00:44:57.344653 env[1736]: time="2025-11-01T00:44:57.344599950Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.34.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:57.347034 env[1736]: time="2025-11-01T00:44:57.346991266Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fc25172553d79197ecd840ec8dba1fba68330079355e974b04c1a441e6a4a0b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:57.349021 env[1736]: time="2025-11-01T00:44:57.348984580Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.34.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:57.350457 env[1736]: time="2025-11-01T00:44:57.350419427Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:913cc83ca0b5588a81d86ce8eedeb3ed1e9c1326e81852a1ea4f622b74ff749a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:57.350981 env[1736]: time="2025-11-01T00:44:57.350942408Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.34.1\" returns image reference \"sha256:fc25172553d79197ecd840ec8dba1fba68330079355e974b04c1a441e6a4a0b7\"" Nov 1 00:44:57.351664 env[1736]: time="2025-11-01T00:44:57.351637187Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.1\"" Nov 1 00:44:57.879039 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3213865256.mount: Deactivated successfully. Nov 1 00:44:59.207881 env[1736]: time="2025-11-01T00:44:59.207759186Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:59.210073 env[1736]: time="2025-11-01T00:44:59.210022522Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:52546a367cc9e0d924aa3b190596a9167fa6e53245023b5b5baf0f07e5443969,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:59.211933 env[1736]: time="2025-11-01T00:44:59.211896573Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:59.213975 env[1736]: time="2025-11-01T00:44:59.213936878Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:e8c262566636e6bc340ece6473b0eed193cad045384401529721ddbe6463d31c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:59.215073 env[1736]: time="2025-11-01T00:44:59.215031179Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.1\" returns image reference \"sha256:52546a367cc9e0d924aa3b190596a9167fa6e53245023b5b5baf0f07e5443969\"" Nov 1 00:44:59.215798 env[1736]: time="2025-11-01T00:44:59.215770837Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10.1\"" Nov 1 00:44:59.680126 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount209255271.mount: Deactivated successfully. Nov 1 00:44:59.686737 env[1736]: time="2025-11-01T00:44:59.686694477Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:59.688837 env[1736]: time="2025-11-01T00:44:59.688799573Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cd073f4c5f6a8e9dc6f3125ba00cf60819cae95c1ec84a1f146ee4a9cf9e803f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:59.690856 env[1736]: time="2025-11-01T00:44:59.690818817Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:59.692601 env[1736]: time="2025-11-01T00:44:59.692565628Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:278fb9dbcca9518083ad1e11276933a2e96f23de604a3a08cc3c80002767d24c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:44:59.693225 env[1736]: time="2025-11-01T00:44:59.693189348Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10.1\" returns image reference \"sha256:cd073f4c5f6a8e9dc6f3125ba00cf60819cae95c1ec84a1f146ee4a9cf9e803f\"" Nov 1 00:44:59.693685 env[1736]: time="2025-11-01T00:44:59.693664450Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.6.4-0\"" Nov 1 00:45:00.986037 kernel: kauditd_printk_skb: 88 callbacks suppressed Nov 1 00:45:00.986215 kernel: audit: type=1130 audit(1761957900.959:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:00.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:00.961339 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:45:00.961629 systemd[1]: Stopped kubelet.service. Nov 1 00:45:00.985052 systemd[1]: Starting kubelet.service... Nov 1 00:45:00.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:01.001810 kernel: audit: type=1131 audit(1761957900.959:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:01.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:01.893691 systemd[1]: Started kubelet.service. Nov 1 00:45:01.983668 kernel: audit: type=1130 audit(1761957901.906:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:02.722559 kubelet[2155]: E1101 00:45:02.722508 2155 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:45:02.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:45:02.728326 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:45:02.728508 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:45:02.740484 kernel: audit: type=1131 audit(1761957902.727:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:45:05.990011 env[1736]: time="2025-11-01T00:45:05.989951793Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.6.4-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:05.997224 env[1736]: time="2025-11-01T00:45:05.997182188Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5f1f5298c888daa46c4409ff4cefe5ca9d16e479419f94cdb5f5d5563dac0115,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:06.013121 env[1736]: time="2025-11-01T00:45:06.013064860Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.6.4-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:06.021990 env[1736]: time="2025-11-01T00:45:06.021932302Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.6.4-0\" returns image reference \"sha256:5f1f5298c888daa46c4409ff4cefe5ca9d16e479419f94cdb5f5d5563dac0115\"" Nov 1 00:45:06.023536 env[1736]: time="2025-11-01T00:45:06.023498203Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e36c081683425b5b3bc1425bc508b37e7107bb65dfa9367bf5a80125d431fa19,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:07.761628 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Nov 1 00:45:07.769027 kernel: audit: type=1131 audit(1761957907.760:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:07.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:07.787342 kernel: audit: type=1334 audit(1761957907.781:263): prog-id=43 op=UNLOAD Nov 1 00:45:07.787487 kernel: audit: type=1334 audit(1761957907.781:264): prog-id=42 op=UNLOAD Nov 1 00:45:07.787522 kernel: audit: type=1334 audit(1761957907.781:265): prog-id=41 op=UNLOAD Nov 1 00:45:07.781000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:45:07.781000 audit: BPF prog-id=42 op=UNLOAD Nov 1 00:45:07.781000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:45:10.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:10.737049 systemd[1]: Stopped kubelet.service. Nov 1 00:45:10.746111 kernel: audit: type=1130 audit(1761957910.735:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:10.746230 kernel: audit: type=1131 audit(1761957910.736:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:10.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:10.746104 systemd[1]: Starting kubelet.service... Nov 1 00:45:10.783196 systemd[1]: Reloading. Nov 1 00:45:10.907331 /usr/lib/systemd/system-generators/torcx-generator[2207]: time="2025-11-01T00:45:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:45:10.907909 /usr/lib/systemd/system-generators/torcx-generator[2207]: time="2025-11-01T00:45:10Z" level=info msg="torcx already run" Nov 1 00:45:11.039941 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:45:11.039967 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:45:11.066659 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.174206 kernel: audit: type=1400 audit(1761957911.162:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.174354 kernel: audit: type=1400 audit(1761957911.162:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.174392 kernel: audit: type=1400 audit(1761957911.162:270): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187114 kernel: audit: type=1400 audit(1761957911.162:271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit: BPF prog-id=46 op=LOAD Nov 1 00:45:11.167000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit: BPF prog-id=47 op=LOAD Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.186000 audit: BPF prog-id=48 op=LOAD Nov 1 00:45:11.186000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:45:11.186000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit: BPF prog-id=49 op=LOAD Nov 1 00:45:11.188000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.188000 audit: BPF prog-id=50 op=LOAD Nov 1 00:45:11.188000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit: BPF prog-id=51 op=LOAD Nov 1 00:45:11.190000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit: BPF prog-id=52 op=LOAD Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.190000 audit: BPF prog-id=53 op=LOAD Nov 1 00:45:11.190000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:45:11.190000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit: BPF prog-id=54 op=LOAD Nov 1 00:45:11.192000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit: BPF prog-id=55 op=LOAD Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.192000 audit: BPF prog-id=56 op=LOAD Nov 1 00:45:11.192000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:45:11.192000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.194000 audit: BPF prog-id=57 op=LOAD Nov 1 00:45:11.194000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit: BPF prog-id=58 op=LOAD Nov 1 00:45:11.196000 audit: BPF prog-id=33 op=UNLOAD Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit: BPF prog-id=59 op=LOAD Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:11.196000 audit: BPF prog-id=60 op=LOAD Nov 1 00:45:11.196000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:45:11.196000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:45:11.218377 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Nov 1 00:45:11.218478 systemd[1]: kubelet.service: Failed with result 'signal'. Nov 1 00:45:11.218786 systemd[1]: Stopped kubelet.service. Nov 1 00:45:11.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:45:11.221015 systemd[1]: Starting kubelet.service... Nov 1 00:45:11.504538 systemd[1]: Started kubelet.service. Nov 1 00:45:11.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:11.566644 kubelet[2266]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:45:11.567030 kubelet[2266]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:45:11.567163 kubelet[2266]: I1101 00:45:11.567141 2266 server.go:213] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:45:11.976379 kubelet[2266]: I1101 00:45:11.976334 2266 server.go:529] "Kubelet version" kubeletVersion="v1.34.1" Nov 1 00:45:11.976379 kubelet[2266]: I1101 00:45:11.976374 2266 server.go:531] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:45:11.978476 kubelet[2266]: I1101 00:45:11.978444 2266 watchdog_linux.go:95] "Systemd watchdog is not enabled" Nov 1 00:45:11.978654 kubelet[2266]: I1101 00:45:11.978641 2266 watchdog_linux.go:137] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:45:11.979373 kubelet[2266]: I1101 00:45:11.979347 2266 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:45:11.988523 kubelet[2266]: E1101 00:45:11.988458 2266 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.16.197:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:45:11.988699 kubelet[2266]: I1101 00:45:11.988656 2266 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:45:11.993686 kubelet[2266]: E1101 00:45:11.993633 2266 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:45:11.993877 kubelet[2266]: I1101 00:45:11.993724 2266 server.go:1400] "CRI implementation should be updated to support RuntimeConfig. Falling back to using cgroupDriver from kubelet config." Nov 1 00:45:11.998604 kubelet[2266]: I1101 00:45:11.998563 2266 server.go:781] "--cgroups-per-qos enabled, but --cgroup-root was not specified. Defaulting to /" Nov 1 00:45:11.998879 kubelet[2266]: I1101 00:45:11.998845 2266 container_manager_linux.go:270] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:45:11.999081 kubelet[2266]: I1101 00:45:11.998878 2266 container_manager_linux.go:275] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-16-197","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:45:11.999237 kubelet[2266]: I1101 00:45:11.999086 2266 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:45:11.999237 kubelet[2266]: I1101 00:45:11.999101 2266 container_manager_linux.go:306] "Creating device plugin manager" Nov 1 00:45:11.999237 kubelet[2266]: I1101 00:45:11.999223 2266 container_manager_linux.go:315] "Creating Dynamic Resource Allocation (DRA) manager" Nov 1 00:45:12.004913 kubelet[2266]: I1101 00:45:12.004869 2266 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:45:12.007022 kubelet[2266]: I1101 00:45:12.006984 2266 kubelet.go:475] "Attempting to sync node with API server" Nov 1 00:45:12.007594 kubelet[2266]: E1101 00:45:12.007556 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.16.197:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-197&limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:45:12.007725 kubelet[2266]: I1101 00:45:12.007611 2266 kubelet.go:376] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:45:12.007725 kubelet[2266]: I1101 00:45:12.007656 2266 kubelet.go:387] "Adding apiserver pod source" Nov 1 00:45:12.010411 kubelet[2266]: I1101 00:45:12.010379 2266 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:45:12.014383 kubelet[2266]: I1101 00:45:12.014350 2266 kuberuntime_manager.go:291] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:45:12.014942 kubelet[2266]: I1101 00:45:12.014919 2266 kubelet.go:940] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:45:12.015045 kubelet[2266]: I1101 00:45:12.014959 2266 kubelet.go:964] "Not starting PodCertificateRequest manager because we are in static kubelet mode or the PodCertificateProjection feature gate is disabled" Nov 1 00:45:12.015045 kubelet[2266]: W1101 00:45:12.015018 2266 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:45:12.024328 kubelet[2266]: I1101 00:45:12.024301 2266 server.go:1262] "Started kubelet" Nov 1 00:45:12.024784 kubelet[2266]: E1101 00:45:12.024732 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.16.197:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:45:12.024000 audit[2266]: AVC avc: denied { mac_admin } for pid=2266 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:12.024000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:45:12.024000 audit[2266]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008ffaa0 a1=c000926bb8 a2=c0008ffa70 a3=25 items=0 ppid=1 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.024000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:45:12.026502 kubelet[2266]: I1101 00:45:12.026472 2266 kubelet.go:1567] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:45:12.026647 kubelet[2266]: I1101 00:45:12.026630 2266 kubelet.go:1571] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:45:12.026833 kubelet[2266]: I1101 00:45:12.026821 2266 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:45:12.024000 audit[2266]: AVC avc: denied { mac_admin } for pid=2266 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:12.024000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:45:12.024000 audit[2266]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b325e0 a1=c000926bd0 a2=c0008ffb30 a3=25 items=0 ppid=1 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.024000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:45:12.044916 kubelet[2266]: E1101 00:45:12.043287 2266 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.16.197:6443/api/v1/namespaces/default/events\": dial tcp 172.31.16.197:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-16-197.1873bb62bf651f9e default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-16-197,UID:ip-172-31-16-197,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-16-197,},FirstTimestamp:2025-11-01 00:45:12.02426051 +0000 UTC m=+0.511904135,LastTimestamp:2025-11-01 00:45:12.02426051 +0000 UTC m=+0.511904135,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-16-197,}" Nov 1 00:45:12.048088 kubelet[2266]: I1101 00:45:12.048019 2266 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:45:12.048647 kubelet[2266]: E1101 00:45:12.048612 2266 kubelet.go:1615] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:45:12.048788 kubelet[2266]: I1101 00:45:12.048691 2266 ratelimit.go:56] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:45:12.048856 kubelet[2266]: I1101 00:45:12.048805 2266 server_v1.go:49] "podresources" method="list" useActivePods=true Nov 1 00:45:12.049499 kubelet[2266]: I1101 00:45:12.049147 2266 server.go:249] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:45:12.051053 kubelet[2266]: I1101 00:45:12.051033 2266 server.go:310] "Adding debug handlers to kubelet server" Nov 1 00:45:12.051958 kubelet[2266]: I1101 00:45:12.051745 2266 volume_manager.go:313] "Starting Kubelet Volume Manager" Nov 1 00:45:12.052343 kubelet[2266]: E1101 00:45:12.052309 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:12.052849 kubelet[2266]: I1101 00:45:12.052660 2266 desired_state_of_world_populator.go:146] "Desired state populator starts to run" Nov 1 00:45:12.052849 kubelet[2266]: I1101 00:45:12.052715 2266 reconciler.go:29] "Reconciler: start to sync state" Nov 1 00:45:12.053745 kubelet[2266]: I1101 00:45:12.053715 2266 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:45:12.054318 kubelet[2266]: E1101 00:45:12.054007 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.16.197:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:45:12.054318 kubelet[2266]: E1101 00:45:12.054098 2266 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.197:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-197?timeout=10s\": dial tcp 172.31.16.197:6443: connect: connection refused" interval="200ms" Nov 1 00:45:12.057061 kubelet[2266]: I1101 00:45:12.057035 2266 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:45:12.060980 kubelet[2266]: I1101 00:45:12.060960 2266 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:45:12.061136 kubelet[2266]: I1101 00:45:12.061124 2266 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:45:12.059000 audit[2282]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:12.059000 audit[2282]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe8ead5800 a2=0 a3=7ffe8ead57ec items=0 ppid=2266 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:45:12.062000 audit[2283]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:12.062000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0ae345f0 a2=0 a3=7fff0ae345dc items=0 ppid=2266 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.062000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:45:12.066000 audit[2285]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:12.066000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc848a97d0 a2=0 a3=7ffc848a97bc items=0 ppid=2266 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:45:12.069000 audit[2287]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:12.069000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc542c94e0 a2=0 a3=7ffc542c94cc items=0 ppid=2266 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.069000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:45:12.078000 audit[2290]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:12.078000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd80ff2da0 a2=0 a3=7ffd80ff2d8c items=0 ppid=2266 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F380000002D2D737263003132372E Nov 1 00:45:12.080683 kubelet[2266]: I1101 00:45:12.080651 2266 kubelet_network_linux.go:54] "Initialized iptables rules." protocol="IPv4" Nov 1 00:45:12.087000 audit[2291]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:12.087000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe626e5400 a2=0 a3=7ffe626e53ec items=0 ppid=2266 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.087000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:45:12.089669 kubelet[2266]: I1101 00:45:12.089631 2266 kubelet_network_linux.go:54] "Initialized iptables rules." protocol="IPv6" Nov 1 00:45:12.089669 kubelet[2266]: I1101 00:45:12.089664 2266 status_manager.go:244] "Starting to sync pod status with apiserver" Nov 1 00:45:12.089994 kubelet[2266]: I1101 00:45:12.089696 2266 kubelet.go:2427] "Starting kubelet main sync loop" Nov 1 00:45:12.089994 kubelet[2266]: E1101 00:45:12.089816 2266 kubelet.go:2451] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:45:12.088000 audit[2294]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:12.088000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff671789c0 a2=0 a3=10e3 items=0 ppid=2266 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:45:12.092629 kubelet[2266]: I1101 00:45:12.092602 2266 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:45:12.092629 kubelet[2266]: I1101 00:45:12.092622 2266 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:45:12.092794 kubelet[2266]: I1101 00:45:12.092640 2266 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:45:12.092960 kubelet[2266]: E1101 00:45:12.092936 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.16.197:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:45:12.092000 audit[2298]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:12.092000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd61391c0 a2=0 a3=7ffdd61391ac items=0 ppid=2266 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.092000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:45:12.095040 kubelet[2266]: I1101 00:45:12.095020 2266 policy_none.go:49] "None policy: Start" Nov 1 00:45:12.095139 kubelet[2266]: I1101 00:45:12.095047 2266 memory_manager.go:187] "Starting memorymanager" policy="None" Nov 1 00:45:12.095139 kubelet[2266]: I1101 00:45:12.095062 2266 state_mem.go:36] "Initializing new in-memory state store" logger="Memory Manager state checkpoint" Nov 1 00:45:12.094000 audit[2297]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:12.094000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6b2cddb0 a2=0 a3=7ffd6b2cdd9c items=0 ppid=2266 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.094000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:45:12.096000 audit[2301]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:12.096000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd4efa0820 a2=0 a3=7ffd4efa080c items=0 ppid=2266 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:45:12.097000 audit[2302]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:12.097000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffeb9791b50 a2=0 a3=7ffeb9791b3c items=0 ppid=2266 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.097000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:45:12.099000 audit[2300]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:12.099000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe1f23120 a2=0 a3=7fffe1f2310c items=0 ppid=2266 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:45:12.102731 kubelet[2266]: I1101 00:45:12.097176 2266 policy_none.go:47] "Start" Nov 1 00:45:12.106742 systemd[1]: Created slice kubepods.slice. Nov 1 00:45:12.112684 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:45:12.120832 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:45:12.123763 kubelet[2266]: E1101 00:45:12.123723 2266 manager.go:513] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:45:12.122000 audit[2266]: AVC avc: denied { mac_admin } for pid=2266 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:12.122000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:45:12.122000 audit[2266]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d78ff0 a1=c000d736b0 a2=c000d78fc0 a3=25 items=0 ppid=1 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:12.122000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:45:12.126180 kubelet[2266]: E1101 00:45:12.125853 2266 server.go:96] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:45:12.126180 kubelet[2266]: I1101 00:45:12.126045 2266 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:45:12.126180 kubelet[2266]: I1101 00:45:12.126059 2266 container_log_manager.go:146] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:45:12.126985 kubelet[2266]: I1101 00:45:12.126588 2266 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:45:12.128703 kubelet[2266]: E1101 00:45:12.127673 2266 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:45:12.128703 kubelet[2266]: E1101 00:45:12.127716 2266 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-16-197\" not found" Nov 1 00:45:12.202483 systemd[1]: Created slice kubepods-burstable-pod6dbf55f9b26764616f0ce148cc058781.slice. Nov 1 00:45:12.211158 kubelet[2266]: E1101 00:45:12.210827 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:12.212927 systemd[1]: Created slice kubepods-burstable-poda45faea1d161b6a89a3417be425ed7e4.slice. Nov 1 00:45:12.215608 kubelet[2266]: E1101 00:45:12.215587 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:12.217381 systemd[1]: Created slice kubepods-burstable-pod98d6f7a1ddf8d9dd501331a3b58bd225.slice. Nov 1 00:45:12.218979 kubelet[2266]: E1101 00:45:12.218952 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:12.228521 kubelet[2266]: I1101 00:45:12.228426 2266 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-16-197" Nov 1 00:45:12.231331 kubelet[2266]: E1101 00:45:12.231298 2266 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.16.197:6443/api/v1/nodes\": dial tcp 172.31.16.197:6443: connect: connection refused" node="ip-172-31-16-197" Nov 1 00:45:12.255039 kubelet[2266]: E1101 00:45:12.254996 2266 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.197:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-197?timeout=10s\": dial tcp 172.31.16.197:6443: connect: connection refused" interval="400ms" Nov 1 00:45:12.354712 kubelet[2266]: I1101 00:45:12.354668 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6dbf55f9b26764616f0ce148cc058781-k8s-certs\") pod \"kube-apiserver-ip-172-31-16-197\" (UID: \"6dbf55f9b26764616f0ce148cc058781\") " pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:12.354948 kubelet[2266]: I1101 00:45:12.354782 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6dbf55f9b26764616f0ce148cc058781-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-16-197\" (UID: \"6dbf55f9b26764616f0ce148cc058781\") " pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:12.354948 kubelet[2266]: I1101 00:45:12.354852 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/98d6f7a1ddf8d9dd501331a3b58bd225-kubeconfig\") pod \"kube-scheduler-ip-172-31-16-197\" (UID: \"98d6f7a1ddf8d9dd501331a3b58bd225\") " pod="kube-system/kube-scheduler-ip-172-31-16-197" Nov 1 00:45:12.354948 kubelet[2266]: I1101 00:45:12.354881 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6dbf55f9b26764616f0ce148cc058781-ca-certs\") pod \"kube-apiserver-ip-172-31-16-197\" (UID: \"6dbf55f9b26764616f0ce148cc058781\") " pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:12.354948 kubelet[2266]: I1101 00:45:12.354909 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-ca-certs\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:12.354948 kubelet[2266]: I1101 00:45:12.354929 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:12.355291 kubelet[2266]: I1101 00:45:12.354957 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-k8s-certs\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:12.355291 kubelet[2266]: I1101 00:45:12.354982 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-kubeconfig\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:12.355291 kubelet[2266]: I1101 00:45:12.355005 2266 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:12.433460 kubelet[2266]: I1101 00:45:12.433423 2266 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-16-197" Nov 1 00:45:12.433844 kubelet[2266]: E1101 00:45:12.433808 2266 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.16.197:6443/api/v1/nodes\": dial tcp 172.31.16.197:6443: connect: connection refused" node="ip-172-31-16-197" Nov 1 00:45:12.516093 env[1736]: time="2025-11-01T00:45:12.515964091Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-16-197,Uid:6dbf55f9b26764616f0ce148cc058781,Namespace:kube-system,Attempt:0,}" Nov 1 00:45:12.519267 env[1736]: time="2025-11-01T00:45:12.519222141Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-16-197,Uid:a45faea1d161b6a89a3417be425ed7e4,Namespace:kube-system,Attempt:0,}" Nov 1 00:45:12.522253 env[1736]: time="2025-11-01T00:45:12.522009696Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-16-197,Uid:98d6f7a1ddf8d9dd501331a3b58bd225,Namespace:kube-system,Attempt:0,}" Nov 1 00:45:12.565912 kubelet[2266]: E1101 00:45:12.565798 2266 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.16.197:6443/api/v1/namespaces/default/events\": dial tcp 172.31.16.197:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-16-197.1873bb62bf651f9e default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-16-197,UID:ip-172-31-16-197,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-16-197,},FirstTimestamp:2025-11-01 00:45:12.02426051 +0000 UTC m=+0.511904135,LastTimestamp:2025-11-01 00:45:12.02426051 +0000 UTC m=+0.511904135,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-16-197,}" Nov 1 00:45:12.656017 kubelet[2266]: E1101 00:45:12.655965 2266 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.197:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-197?timeout=10s\": dial tcp 172.31.16.197:6443: connect: connection refused" interval="800ms" Nov 1 00:45:12.836159 kubelet[2266]: I1101 00:45:12.836052 2266 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-16-197" Nov 1 00:45:12.837911 kubelet[2266]: E1101 00:45:12.837866 2266 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.16.197:6443/api/v1/nodes\": dial tcp 172.31.16.197:6443: connect: connection refused" node="ip-172-31-16-197" Nov 1 00:45:12.927737 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount831923274.mount: Deactivated successfully. Nov 1 00:45:12.936665 env[1736]: time="2025-11-01T00:45:12.936596613Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.940146 env[1736]: time="2025-11-01T00:45:12.940099947Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.941285 env[1736]: time="2025-11-01T00:45:12.941251847Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.942644 env[1736]: time="2025-11-01T00:45:12.942596002Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.952528 env[1736]: time="2025-11-01T00:45:12.952475527Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.954520 env[1736]: time="2025-11-01T00:45:12.954476209Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.957513 env[1736]: time="2025-11-01T00:45:12.957463697Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.960312 env[1736]: time="2025-11-01T00:45:12.960241435Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.961083 env[1736]: time="2025-11-01T00:45:12.961042154Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.963694 env[1736]: time="2025-11-01T00:45:12.963649310Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.964533 env[1736]: time="2025-11-01T00:45:12.964500274Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.975699 env[1736]: time="2025-11-01T00:45:12.975656838Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:12.979687 env[1736]: time="2025-11-01T00:45:12.979600888Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:45:12.980048 env[1736]: time="2025-11-01T00:45:12.979669272Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:45:12.980048 env[1736]: time="2025-11-01T00:45:12.980022206Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:45:12.980568 env[1736]: time="2025-11-01T00:45:12.980526974Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/478944cefac97a3dc28ba066899c3152c6e8133f0e8281d24077972bdf703ef1 pid=2311 runtime=io.containerd.runc.v2 Nov 1 00:45:13.015619 systemd[1]: Started cri-containerd-478944cefac97a3dc28ba066899c3152c6e8133f0e8281d24077972bdf703ef1.scope. Nov 1 00:45:13.020403 kubelet[2266]: E1101 00:45:13.017878 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.16.197:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:45:13.037284 env[1736]: time="2025-11-01T00:45:13.037196369Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:45:13.037763 env[1736]: time="2025-11-01T00:45:13.037691327Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:45:13.037955 env[1736]: time="2025-11-01T00:45:13.037917048Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:45:13.039070 env[1736]: time="2025-11-01T00:45:13.038932792Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3d647310e3cc799b47c8667ce7b5274b17d04462c646912694551140188743c1 pid=2345 runtime=io.containerd.runc.v2 Nov 1 00:45:13.043153 env[1736]: time="2025-11-01T00:45:13.042997566Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:45:13.043153 env[1736]: time="2025-11-01T00:45:13.043124608Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:45:13.043365 env[1736]: time="2025-11-01T00:45:13.043160360Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:45:13.043982 env[1736]: time="2025-11-01T00:45:13.043385099Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/692883a93a2c2dd30fb4448ba8ea0f77142f6138ccf88a7695ff8e2d100bf2bf pid=2355 runtime=io.containerd.runc.v2 Nov 1 00:45:13.054678 kernel: kauditd_printk_skb: 218 callbacks suppressed Nov 1 00:45:13.055285 kernel: audit: type=1400 audit(1761957913.044:457): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.071821 kernel: audit: type=1400 audit(1761957913.044:458): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.071964 kernel: audit: type=1400 audit(1761957913.044:459): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.086360 kernel: audit: type=1400 audit(1761957913.044:460): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.086503 kernel: audit: type=1400 audit(1761957913.044:461): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.096809 kernel: audit: type=1400 audit(1761957913.044:462): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.105890 kernel: audit: type=1400 audit(1761957913.044:463): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.113978 kernel: audit: type=1400 audit(1761957913.044:464): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.119695 systemd[1]: Started cri-containerd-692883a93a2c2dd30fb4448ba8ea0f77142f6138ccf88a7695ff8e2d100bf2bf.scope. Nov 1 00:45:13.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.131877 kernel: audit: type=1400 audit(1761957913.044:465): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.146811 kernel: audit: type=1400 audit(1761957913.053:466): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.053000 audit: BPF prog-id=61 op=LOAD Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2311 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437383934346365666163393761336463323862613036363839396333 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2311 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437383934346365666163393761336463323862613036363839396333 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit: BPF prog-id=62 op=LOAD Nov 1 00:45:13.054000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000298c40 items=0 ppid=2311 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437383934346365666163393761336463323862613036363839396333 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit: BPF prog-id=63 op=LOAD Nov 1 00:45:13.054000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000298c88 items=0 ppid=2311 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437383934346365666163393761336463323862613036363839396333 Nov 1 00:45:13.054000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:45:13.054000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.054000 audit: BPF prog-id=64 op=LOAD Nov 1 00:45:13.054000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000299098 items=0 ppid=2311 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437383934346365666163393761336463323862613036363839396333 Nov 1 00:45:13.154533 systemd[1]: Started cri-containerd-3d647310e3cc799b47c8667ce7b5274b17d04462c646912694551140188743c1.scope. Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.157000 audit: BPF prog-id=65 op=LOAD Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2355 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639323838336139336132633264643330666234343438626138656130 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2355 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639323838336139336132633264643330666234343438626138656130 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit: BPF prog-id=66 op=LOAD Nov 1 00:45:13.158000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000380e70 items=0 ppid=2355 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639323838336139336132633264643330666234343438626138656130 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit: BPF prog-id=67 op=LOAD Nov 1 00:45:13.158000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000380eb8 items=0 ppid=2355 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639323838336139336132633264643330666234343438626138656130 Nov 1 00:45:13.158000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:45:13.158000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { perfmon } for pid=2375 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit[2375]: AVC avc: denied { bpf } for pid=2375 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.158000 audit: BPF prog-id=68 op=LOAD Nov 1 00:45:13.158000 audit[2375]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003812c8 items=0 ppid=2355 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639323838336139336132633264643330666234343438626138656130 Nov 1 00:45:13.168890 env[1736]: time="2025-11-01T00:45:13.168842802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-16-197,Uid:98d6f7a1ddf8d9dd501331a3b58bd225,Namespace:kube-system,Attempt:0,} returns sandbox id \"478944cefac97a3dc28ba066899c3152c6e8133f0e8281d24077972bdf703ef1\"" Nov 1 00:45:13.189316 kubelet[2266]: E1101 00:45:13.189279 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.16.197:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-197&limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:45:13.197074 env[1736]: time="2025-11-01T00:45:13.197037078Z" level=info msg="CreateContainer within sandbox \"478944cefac97a3dc28ba066899c3152c6e8133f0e8281d24077972bdf703ef1\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit: BPF prog-id=69 op=LOAD Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2345 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364363437333130653363633739396234376338363637636537623532 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2345 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364363437333130653363633739396234376338363637636537623532 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.210000 audit: BPF prog-id=70 op=LOAD Nov 1 00:45:13.210000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003011c0 items=0 ppid=2345 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364363437333130653363633739396234376338363637636537623532 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit: BPF prog-id=71 op=LOAD Nov 1 00:45:13.211000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000301208 items=0 ppid=2345 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364363437333130653363633739396234376338363637636537623532 Nov 1 00:45:13.211000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:45:13.211000 audit: BPF prog-id=70 op=UNLOAD Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.211000 audit: BPF prog-id=72 op=LOAD Nov 1 00:45:13.211000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000301618 items=0 ppid=2345 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364363437333130653363633739396234376338363637636537623532 Nov 1 00:45:13.218980 env[1736]: time="2025-11-01T00:45:13.218927547Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-16-197,Uid:6dbf55f9b26764616f0ce148cc058781,Namespace:kube-system,Attempt:0,} returns sandbox id \"692883a93a2c2dd30fb4448ba8ea0f77142f6138ccf88a7695ff8e2d100bf2bf\"" Nov 1 00:45:13.224554 env[1736]: time="2025-11-01T00:45:13.224508697Z" level=info msg="CreateContainer within sandbox \"692883a93a2c2dd30fb4448ba8ea0f77142f6138ccf88a7695ff8e2d100bf2bf\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:45:13.242375 kubelet[2266]: E1101 00:45:13.242309 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.16.197:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:45:13.243569 env[1736]: time="2025-11-01T00:45:13.243524355Z" level=info msg="CreateContainer within sandbox \"478944cefac97a3dc28ba066899c3152c6e8133f0e8281d24077972bdf703ef1\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb\"" Nov 1 00:45:13.244646 env[1736]: time="2025-11-01T00:45:13.244614471Z" level=info msg="StartContainer for \"d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb\"" Nov 1 00:45:13.247255 env[1736]: time="2025-11-01T00:45:13.247215833Z" level=info msg="CreateContainer within sandbox \"692883a93a2c2dd30fb4448ba8ea0f77142f6138ccf88a7695ff8e2d100bf2bf\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e204e2636bf81e76dcaf766ea3041087f7acb9cdbbd1ebb526588c34d6d99d4e\"" Nov 1 00:45:13.248128 env[1736]: time="2025-11-01T00:45:13.248095161Z" level=info msg="StartContainer for \"e204e2636bf81e76dcaf766ea3041087f7acb9cdbbd1ebb526588c34d6d99d4e\"" Nov 1 00:45:13.259738 env[1736]: time="2025-11-01T00:45:13.259002522Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-16-197,Uid:a45faea1d161b6a89a3417be425ed7e4,Namespace:kube-system,Attempt:0,} returns sandbox id \"3d647310e3cc799b47c8667ce7b5274b17d04462c646912694551140188743c1\"" Nov 1 00:45:13.264418 env[1736]: time="2025-11-01T00:45:13.264375881Z" level=info msg="CreateContainer within sandbox \"3d647310e3cc799b47c8667ce7b5274b17d04462c646912694551140188743c1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:45:13.281484 systemd[1]: Started cri-containerd-d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb.scope. Nov 1 00:45:13.288074 env[1736]: time="2025-11-01T00:45:13.285169766Z" level=info msg="CreateContainer within sandbox \"3d647310e3cc799b47c8667ce7b5274b17d04462c646912694551140188743c1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06\"" Nov 1 00:45:13.288475 env[1736]: time="2025-11-01T00:45:13.288435337Z" level=info msg="StartContainer for \"ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06\"" Nov 1 00:45:13.296721 systemd[1]: Started cri-containerd-e204e2636bf81e76dcaf766ea3041087f7acb9cdbbd1ebb526588c34d6d99d4e.scope. Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.316000 audit: BPF prog-id=73 op=LOAD Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2311 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431346365363561373039386563376436316465393061396131313137 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2311 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431346365363561373039386563376436316465393061396131313137 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit: BPF prog-id=74 op=LOAD Nov 1 00:45:13.317000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003e2850 items=0 ppid=2311 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431346365363561373039386563376436316465393061396131313137 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit: BPF prog-id=75 op=LOAD Nov 1 00:45:13.317000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003e2898 items=0 ppid=2311 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431346365363561373039386563376436316465393061396131313137 Nov 1 00:45:13.317000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:45:13.317000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.317000 audit: BPF prog-id=76 op=LOAD Nov 1 00:45:13.317000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003e2ca8 items=0 ppid=2311 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431346365363561373039386563376436316465393061396131313137 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.334000 audit: BPF prog-id=77 op=LOAD Nov 1 00:45:13.335000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.335000 audit[2447]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2355 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532303465323633366266383165373664636166373636656133303431 Nov 1 00:45:13.335000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.335000 audit[2447]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2355 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532303465323633366266383165373664636166373636656133303431 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit: BPF prog-id=78 op=LOAD Nov 1 00:45:13.337000 audit[2447]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00030c370 items=0 ppid=2355 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532303465323633366266383165373664636166373636656133303431 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit: BPF prog-id=79 op=LOAD Nov 1 00:45:13.337000 audit[2447]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00030c3b8 items=0 ppid=2355 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532303465323633366266383165373664636166373636656133303431 Nov 1 00:45:13.337000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:45:13.337000 audit: BPF prog-id=78 op=UNLOAD Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.337000 audit: BPF prog-id=80 op=LOAD Nov 1 00:45:13.337000 audit[2447]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00030c7c8 items=0 ppid=2355 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532303465323633366266383165373664636166373636656133303431 Nov 1 00:45:13.359309 systemd[1]: Started cri-containerd-ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06.scope. Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.387000 audit: BPF prog-id=81 op=LOAD Nov 1 00:45:13.388000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.388000 audit[2481]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2345 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163376461646436633237666466626130336337323135313932373136 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2345 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163376461646436633237666466626130336337323135313932373136 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.389000 audit: BPF prog-id=82 op=LOAD Nov 1 00:45:13.389000 audit[2481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000309310 items=0 ppid=2345 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163376461646436633237666466626130336337323135313932373136 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.390000 audit: BPF prog-id=83 op=LOAD Nov 1 00:45:13.390000 audit[2481]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000309358 items=0 ppid=2345 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163376461646436633237666466626130336337323135313932373136 Nov 1 00:45:13.392000 audit: BPF prog-id=83 op=UNLOAD Nov 1 00:45:13.392000 audit: BPF prog-id=82 op=UNLOAD Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { perfmon } for pid=2481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit[2481]: AVC avc: denied { bpf } for pid=2481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:13.394000 audit: BPF prog-id=84 op=LOAD Nov 1 00:45:13.394000 audit[2481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000309768 items=0 ppid=2345 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:13.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163376461646436633237666466626130336337323135313932373136 Nov 1 00:45:13.410642 env[1736]: time="2025-11-01T00:45:13.410549427Z" level=info msg="StartContainer for \"d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb\" returns successfully" Nov 1 00:45:13.426575 env[1736]: time="2025-11-01T00:45:13.426516361Z" level=info msg="StartContainer for \"e204e2636bf81e76dcaf766ea3041087f7acb9cdbbd1ebb526588c34d6d99d4e\" returns successfully" Nov 1 00:45:13.446177 kubelet[2266]: E1101 00:45:13.446118 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.16.197:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:45:13.453252 env[1736]: time="2025-11-01T00:45:13.453203634Z" level=info msg="StartContainer for \"ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06\" returns successfully" Nov 1 00:45:13.457578 kubelet[2266]: E1101 00:45:13.457491 2266 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.197:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-197?timeout=10s\": dial tcp 172.31.16.197:6443: connect: connection refused" interval="1.6s" Nov 1 00:45:13.640716 kubelet[2266]: I1101 00:45:13.640262 2266 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-16-197" Nov 1 00:45:13.640716 kubelet[2266]: E1101 00:45:13.640610 2266 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.16.197:6443/api/v1/nodes\": dial tcp 172.31.16.197:6443: connect: connection refused" node="ip-172-31-16-197" Nov 1 00:45:14.046126 kubelet[2266]: E1101 00:45:14.046087 2266 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.16.197:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:45:14.103474 kubelet[2266]: E1101 00:45:14.103447 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:14.108815 kubelet[2266]: E1101 00:45:14.108787 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:14.111980 kubelet[2266]: E1101 00:45:14.111954 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:14.995000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:14.995000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000e56150 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:14.995000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:14.996000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:14.996000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003982a0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:14.996000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:15.013085 kubelet[2266]: E1101 00:45:15.013042 2266 reflector.go:205] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.16.197:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-197&limit=500&resourceVersion=0\": dial tcp 172.31.16.197:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:45:15.058093 kubelet[2266]: E1101 00:45:15.058054 2266 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.197:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-197?timeout=10s\": dial tcp 172.31.16.197:6443: connect: connection refused" interval="3.2s" Nov 1 00:45:15.114314 kubelet[2266]: E1101 00:45:15.114284 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:15.115683 kubelet[2266]: E1101 00:45:15.115657 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:15.243159 kubelet[2266]: I1101 00:45:15.243136 2266 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-16-197" Nov 1 00:45:15.243737 kubelet[2266]: E1101 00:45:15.243707 2266 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.16.197:6443/api/v1/nodes\": dial tcp 172.31.16.197:6443: connect: connection refused" node="ip-172-31-16-197" Nov 1 00:45:16.115651 kubelet[2266]: E1101 00:45:16.115622 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:17.060000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:17.060000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c008561aa0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:45:17.060000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:45:17.060000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:17.060000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0077ce280 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:45:17.060000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:45:17.061000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521055 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:17.061000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c008561bc0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:45:17.061000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:45:17.065000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:17.065000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00156cac0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:45:17.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:45:17.065000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:17.065000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c008f3bfb0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:45:17.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:45:17.067000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521061 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:17.067000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c008561fb0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:45:17.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:45:17.347272 kubelet[2266]: E1101 00:45:17.347198 2266 kubelet.go:3215] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:17.573464 kubelet[2266]: E1101 00:45:17.573427 2266 csi_plugin.go:399] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ip-172-31-16-197" not found Nov 1 00:45:17.946398 kubelet[2266]: E1101 00:45:17.946366 2266 csi_plugin.go:399] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ip-172-31-16-197" not found Nov 1 00:45:18.264192 kubelet[2266]: E1101 00:45:18.264157 2266 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-16-197\" not found" node="ip-172-31-16-197" Nov 1 00:45:18.384483 kubelet[2266]: E1101 00:45:18.384454 2266 csi_plugin.go:399] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ip-172-31-16-197" not found Nov 1 00:45:18.446165 kubelet[2266]: I1101 00:45:18.446135 2266 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-16-197" Nov 1 00:45:18.463559 kubelet[2266]: I1101 00:45:18.463515 2266 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-16-197" Nov 1 00:45:18.463559 kubelet[2266]: E1101 00:45:18.463559 2266 kubelet_node_status.go:486] "Error updating node status, will retry" err="error getting node \"ip-172-31-16-197\": node \"ip-172-31-16-197\" not found" Nov 1 00:45:18.488351 kubelet[2266]: E1101 00:45:18.488315 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:18.589426 kubelet[2266]: E1101 00:45:18.589316 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:18.689908 kubelet[2266]: E1101 00:45:18.689868 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:18.790538 kubelet[2266]: E1101 00:45:18.790500 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:18.891175 kubelet[2266]: E1101 00:45:18.891057 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:18.992302 kubelet[2266]: E1101 00:45:18.992230 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:19.093931 kubelet[2266]: E1101 00:45:19.093106 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:19.193689 kubelet[2266]: E1101 00:45:19.193578 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:19.294316 kubelet[2266]: E1101 00:45:19.294272 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:19.394987 kubelet[2266]: E1101 00:45:19.394946 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:19.489827 systemd[1]: Reloading. Nov 1 00:45:19.495644 kubelet[2266]: E1101 00:45:19.495602 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:19.584782 /usr/lib/systemd/system-generators/torcx-generator[2567]: time="2025-11-01T00:45:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:45:19.584810 /usr/lib/systemd/system-generators/torcx-generator[2567]: time="2025-11-01T00:45:19Z" level=info msg="torcx already run" Nov 1 00:45:19.596417 kubelet[2266]: E1101 00:45:19.596382 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:19.688877 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:45:19.688900 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:45:19.696924 kubelet[2266]: E1101 00:45:19.696882 2266 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:19.708840 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:45:19.808563 kernel: kauditd_printk_skb: 356 callbacks suppressed Nov 1 00:45:19.808708 kernel: audit: type=1400 audit(1761957919.804:573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.823781 kernel: audit: type=1400 audit(1761957919.804:574): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.823937 kubelet[2266]: I1101 00:45:19.823738 2266 kubelet.go:3219] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.838732 kernel: audit: type=1400 audit(1761957919.804:575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.838892 kernel: audit: type=1400 audit(1761957919.804:576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.853271 kernel: audit: type=1400 audit(1761957919.804:577): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.853388 kernel: audit: type=1400 audit(1761957919.804:578): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.853639 kubelet[2266]: I1101 00:45:19.853613 2266 kubelet.go:3219] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:19.862780 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:45:19.862921 kernel: audit: type=1400 audit(1761957919.804:579): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.862960 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.871501 kernel: audit: type=1400 audit(1761957919.804:580): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.813000 audit: BPF prog-id=85 op=LOAD Nov 1 00:45:19.813000 audit: BPF prog-id=65 op=UNLOAD Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.821000 audit: BPF prog-id=86 op=LOAD Nov 1 00:45:19.821000 audit: BPF prog-id=81 op=UNLOAD Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit: BPF prog-id=87 op=LOAD Nov 1 00:45:19.837000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit: BPF prog-id=88 op=LOAD Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.844000 audit: BPF prog-id=89 op=LOAD Nov 1 00:45:19.844000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:45:19.844000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.851000 audit: BPF prog-id=90 op=LOAD Nov 1 00:45:19.851000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:45:19.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.871000 audit: BPF prog-id=91 op=LOAD Nov 1 00:45:19.871000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit: BPF prog-id=92 op=LOAD Nov 1 00:45:19.873000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit: BPF prog-id=93 op=LOAD Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.873000 audit: BPF prog-id=94 op=LOAD Nov 1 00:45:19.873000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:45:19.873000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:45:19.880071 kubelet[2266]: I1101 00:45:19.879785 2266 kubelet.go:3219] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.876000 audit: BPF prog-id=95 op=LOAD Nov 1 00:45:19.876000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit: BPF prog-id=96 op=LOAD Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.877000 audit: BPF prog-id=97 op=LOAD Nov 1 00:45:19.877000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:45:19.877000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.881000 audit: BPF prog-id=98 op=LOAD Nov 1 00:45:19.881000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit: BPF prog-id=99 op=LOAD Nov 1 00:45:19.883000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit: BPF prog-id=100 op=LOAD Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.883000 audit: BPF prog-id=101 op=LOAD Nov 1 00:45:19.883000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:45:19.883000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.884000 audit: BPF prog-id=102 op=LOAD Nov 1 00:45:19.884000 audit: BPF prog-id=77 op=UNLOAD Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit: BPF prog-id=103 op=LOAD Nov 1 00:45:19.885000 audit: BPF prog-id=69 op=UNLOAD Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit: BPF prog-id=104 op=LOAD Nov 1 00:45:19.886000 audit: BPF prog-id=73 op=UNLOAD Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:19.886000 audit: BPF prog-id=105 op=LOAD Nov 1 00:45:19.886000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:45:19.895172 kubelet[2266]: E1101 00:45:19.888873 2266 kubelet.go:3221] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-16-197\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:19.895172 kubelet[2266]: I1101 00:45:19.888902 2266 kubelet.go:3219] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-16-197" Nov 1 00:45:19.913984 systemd[1]: Stopping kubelet.service... Nov 1 00:45:19.934192 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:45:19.934448 systemd[1]: Stopped kubelet.service. Nov 1 00:45:19.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:19.936840 systemd[1]: Starting kubelet.service... Nov 1 00:45:21.397646 systemd[1]: Started kubelet.service. Nov 1 00:45:21.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:21.490377 kubelet[2626]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:45:21.490889 kubelet[2626]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:45:21.491103 kubelet[2626]: I1101 00:45:21.491070 2626 server.go:213] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:45:21.509097 kubelet[2626]: I1101 00:45:21.506102 2626 server.go:529] "Kubelet version" kubeletVersion="v1.34.1" Nov 1 00:45:21.509097 kubelet[2626]: I1101 00:45:21.506136 2626 server.go:531] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:45:21.517821 kubelet[2626]: I1101 00:45:21.513324 2626 watchdog_linux.go:95] "Systemd watchdog is not enabled" Nov 1 00:45:21.517821 kubelet[2626]: I1101 00:45:21.513366 2626 watchdog_linux.go:137] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:45:21.517821 kubelet[2626]: I1101 00:45:21.513821 2626 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:45:21.517821 kubelet[2626]: I1101 00:45:21.515488 2626 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Nov 1 00:45:21.519305 kubelet[2626]: I1101 00:45:21.519276 2626 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:45:21.548457 kubelet[2626]: E1101 00:45:21.548401 2626 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:45:21.548641 kubelet[2626]: I1101 00:45:21.548511 2626 server.go:1400] "CRI implementation should be updated to support RuntimeConfig. Falling back to using cgroupDriver from kubelet config." Nov 1 00:45:21.553180 kubelet[2626]: I1101 00:45:21.552509 2626 server.go:781] "--cgroups-per-qos enabled, but --cgroup-root was not specified. Defaulting to /" Nov 1 00:45:21.557126 kubelet[2626]: I1101 00:45:21.557065 2626 container_manager_linux.go:270] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:45:21.557339 kubelet[2626]: I1101 00:45:21.557130 2626 container_manager_linux.go:275] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-16-197","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:45:21.557500 kubelet[2626]: I1101 00:45:21.557347 2626 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:45:21.557500 kubelet[2626]: I1101 00:45:21.557363 2626 container_manager_linux.go:306] "Creating device plugin manager" Nov 1 00:45:21.557500 kubelet[2626]: I1101 00:45:21.557401 2626 container_manager_linux.go:315] "Creating Dynamic Resource Allocation (DRA) manager" Nov 1 00:45:21.560169 kubelet[2626]: I1101 00:45:21.559050 2626 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:45:21.570764 kubelet[2626]: I1101 00:45:21.570713 2626 kubelet.go:475] "Attempting to sync node with API server" Nov 1 00:45:21.570764 kubelet[2626]: I1101 00:45:21.570743 2626 kubelet.go:376] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:45:21.572062 kubelet[2626]: I1101 00:45:21.571628 2626 kubelet.go:387] "Adding apiserver pod source" Nov 1 00:45:21.572062 kubelet[2626]: I1101 00:45:21.571653 2626 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:45:21.573647 kubelet[2626]: I1101 00:45:21.573174 2626 kuberuntime_manager.go:291] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:45:21.573647 kubelet[2626]: I1101 00:45:21.573642 2626 kubelet.go:940] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:45:21.573827 kubelet[2626]: I1101 00:45:21.573672 2626 kubelet.go:964] "Not starting PodCertificateRequest manager because we are in static kubelet mode or the PodCertificateProjection feature gate is disabled" Nov 1 00:45:21.576182 kubelet[2626]: I1101 00:45:21.576159 2626 server.go:1262] "Started kubelet" Nov 1 00:45:21.576000 audit[2626]: AVC avc: denied { mac_admin } for pid=2626 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:21.576000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:45:21.576000 audit[2626]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b7c960 a1=c000971860 a2=c000b7c930 a3=25 items=0 ppid=1 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:21.576000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:45:21.576000 audit[2626]: AVC avc: denied { mac_admin } for pid=2626 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:21.576000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:45:21.576000 audit[2626]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000805de0 a1=c000971878 a2=c000b7c9f0 a3=25 items=0 ppid=1 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:21.576000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:45:21.579100 kubelet[2626]: I1101 00:45:21.578577 2626 kubelet.go:1567] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:45:21.579100 kubelet[2626]: I1101 00:45:21.578609 2626 kubelet.go:1571] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:45:21.579100 kubelet[2626]: I1101 00:45:21.578664 2626 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:45:21.597705 kubelet[2626]: I1101 00:45:21.597651 2626 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:45:21.601536 kubelet[2626]: I1101 00:45:21.601463 2626 server.go:310] "Adding debug handlers to kubelet server" Nov 1 00:45:21.620808 kubelet[2626]: I1101 00:45:21.620229 2626 ratelimit.go:56] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:45:21.620808 kubelet[2626]: I1101 00:45:21.620305 2626 server_v1.go:49] "podresources" method="list" useActivePods=true Nov 1 00:45:21.620808 kubelet[2626]: I1101 00:45:21.620560 2626 server.go:249] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:45:21.621124 kubelet[2626]: I1101 00:45:21.620907 2626 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:45:21.625146 kubelet[2626]: I1101 00:45:21.624804 2626 volume_manager.go:313] "Starting Kubelet Volume Manager" Nov 1 00:45:21.625146 kubelet[2626]: E1101 00:45:21.625132 2626 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:21.626245 kubelet[2626]: I1101 00:45:21.625864 2626 desired_state_of_world_populator.go:146] "Desired state populator starts to run" Nov 1 00:45:21.626245 kubelet[2626]: I1101 00:45:21.626000 2626 reconciler.go:29] "Reconciler: start to sync state" Nov 1 00:45:21.662266 kubelet[2626]: I1101 00:45:21.661053 2626 kubelet_network_linux.go:54] "Initialized iptables rules." protocol="IPv4" Nov 1 00:45:21.666252 kubelet[2626]: I1101 00:45:21.666214 2626 kubelet_network_linux.go:54] "Initialized iptables rules." protocol="IPv6" Nov 1 00:45:21.666252 kubelet[2626]: I1101 00:45:21.666259 2626 status_manager.go:244] "Starting to sync pod status with apiserver" Nov 1 00:45:21.666444 kubelet[2626]: I1101 00:45:21.666293 2626 kubelet.go:2427] "Starting kubelet main sync loop" Nov 1 00:45:21.666444 kubelet[2626]: E1101 00:45:21.666355 2626 kubelet.go:2451] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:45:21.681455 kubelet[2626]: I1101 00:45:21.680430 2626 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:45:21.683344 kubelet[2626]: E1101 00:45:21.682701 2626 kubelet.go:1615] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:45:21.683344 kubelet[2626]: I1101 00:45:21.683012 2626 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:45:21.683344 kubelet[2626]: I1101 00:45:21.683024 2626 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:45:21.729157 kubelet[2626]: E1101 00:45:21.729126 2626 kubelet_node_status.go:404] "Error getting the current node from lister" err="node \"ip-172-31-16-197\" not found" Nov 1 00:45:21.768141 kubelet[2626]: E1101 00:45:21.768102 2626 kubelet.go:2451] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:45:21.812257 kubelet[2626]: I1101 00:45:21.812231 2626 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:45:21.812548 kubelet[2626]: I1101 00:45:21.812532 2626 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:45:21.812662 kubelet[2626]: I1101 00:45:21.812652 2626 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:45:21.812927 kubelet[2626]: I1101 00:45:21.812914 2626 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:45:21.813022 kubelet[2626]: I1101 00:45:21.813002 2626 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:45:21.813086 kubelet[2626]: I1101 00:45:21.813079 2626 policy_none.go:49] "None policy: Start" Nov 1 00:45:21.813155 kubelet[2626]: I1101 00:45:21.813148 2626 memory_manager.go:187] "Starting memorymanager" policy="None" Nov 1 00:45:21.813218 kubelet[2626]: I1101 00:45:21.813211 2626 state_mem.go:36] "Initializing new in-memory state store" logger="Memory Manager state checkpoint" Nov 1 00:45:21.813367 kubelet[2626]: I1101 00:45:21.813356 2626 state_mem.go:77] "Updated machine memory state" logger="Memory Manager state checkpoint" Nov 1 00:45:21.813444 kubelet[2626]: I1101 00:45:21.813435 2626 policy_none.go:47] "Start" Nov 1 00:45:21.823193 kubelet[2626]: E1101 00:45:21.823168 2626 manager.go:513] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:45:21.821000 audit[2626]: AVC avc: denied { mac_admin } for pid=2626 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:21.821000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:45:21.821000 audit[2626]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c5a540 a1=c000f95998 a2=c000c5a510 a3=25 items=0 ppid=1 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:21.821000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:45:21.824542 kubelet[2626]: E1101 00:45:21.824502 2626 server.go:96] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:45:21.824899 kubelet[2626]: I1101 00:45:21.824886 2626 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:45:21.825061 kubelet[2626]: I1101 00:45:21.825022 2626 container_log_manager.go:146] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:45:21.825607 kubelet[2626]: I1101 00:45:21.825595 2626 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:45:21.830386 kubelet[2626]: E1101 00:45:21.830131 2626 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:45:21.930453 kubelet[2626]: I1101 00:45:21.930338 2626 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-16-197" Nov 1 00:45:21.952779 kubelet[2626]: I1101 00:45:21.952732 2626 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-16-197" Nov 1 00:45:21.953011 kubelet[2626]: I1101 00:45:21.952843 2626 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-16-197" Nov 1 00:45:21.972105 kubelet[2626]: I1101 00:45:21.971970 2626 kubelet.go:3219] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:21.982806 kubelet[2626]: I1101 00:45:21.982187 2626 kubelet.go:3219] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:21.993777 kubelet[2626]: I1101 00:45:21.989392 2626 kubelet.go:3219] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-16-197" Nov 1 00:45:22.001430 kubelet[2626]: E1101 00:45:22.000632 2626 kubelet.go:3221] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-16-197\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:22.005363 kubelet[2626]: E1101 00:45:22.005305 2626 kubelet.go:3221] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-16-197\" already exists" pod="kube-system/kube-scheduler-ip-172-31-16-197" Nov 1 00:45:22.006659 kubelet[2626]: E1101 00:45:22.006628 2626 kubelet.go:3221] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-16-197\" already exists" pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:22.038813 kubelet[2626]: I1101 00:45:22.038746 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:22.039067 kubelet[2626]: I1101 00:45:22.039047 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-k8s-certs\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:22.039216 kubelet[2626]: I1101 00:45:22.039199 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-kubeconfig\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:22.039336 kubelet[2626]: I1101 00:45:22.039318 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6dbf55f9b26764616f0ce148cc058781-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-16-197\" (UID: \"6dbf55f9b26764616f0ce148cc058781\") " pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:22.039464 kubelet[2626]: I1101 00:45:22.039447 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-ca-certs\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:22.039595 kubelet[2626]: I1101 00:45:22.039577 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a45faea1d161b6a89a3417be425ed7e4-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-16-197\" (UID: \"a45faea1d161b6a89a3417be425ed7e4\") " pod="kube-system/kube-controller-manager-ip-172-31-16-197" Nov 1 00:45:22.039744 kubelet[2626]: I1101 00:45:22.039705 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/98d6f7a1ddf8d9dd501331a3b58bd225-kubeconfig\") pod \"kube-scheduler-ip-172-31-16-197\" (UID: \"98d6f7a1ddf8d9dd501331a3b58bd225\") " pod="kube-system/kube-scheduler-ip-172-31-16-197" Nov 1 00:45:22.040023 kubelet[2626]: I1101 00:45:22.039742 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6dbf55f9b26764616f0ce148cc058781-ca-certs\") pod \"kube-apiserver-ip-172-31-16-197\" (UID: \"6dbf55f9b26764616f0ce148cc058781\") " pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:22.040023 kubelet[2626]: I1101 00:45:22.039800 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6dbf55f9b26764616f0ce148cc058781-k8s-certs\") pod \"kube-apiserver-ip-172-31-16-197\" (UID: \"6dbf55f9b26764616f0ce148cc058781\") " pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:22.590647 kubelet[2626]: I1101 00:45:22.590607 2626 apiserver.go:52] "Watching apiserver" Nov 1 00:45:22.626961 kubelet[2626]: I1101 00:45:22.626896 2626 desired_state_of_world_populator.go:154] "Finished populating initial desired state of world" Nov 1 00:45:22.775292 kubelet[2626]: I1101 00:45:22.775262 2626 kubelet.go:3219] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:22.794280 kubelet[2626]: E1101 00:45:22.794237 2626 kubelet.go:3221] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-16-197\" already exists" pod="kube-system/kube-apiserver-ip-172-31-16-197" Nov 1 00:45:22.821350 kubelet[2626]: I1101 00:45:22.821260 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-16-197" podStartSLOduration=3.821205077 podStartE2EDuration="3.821205077s" podCreationTimestamp="2025-11-01 00:45:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:45:22.819369709 +0000 UTC m=+1.405352704" watchObservedRunningTime="2025-11-01 00:45:22.821205077 +0000 UTC m=+1.407188087" Nov 1 00:45:22.824168 update_engine[1728]: I1101 00:45:22.822002 1728 update_attempter.cc:509] Updating boot flags... Nov 1 00:45:22.878117 kubelet[2626]: I1101 00:45:22.877991 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-16-197" podStartSLOduration=3.877969904 podStartE2EDuration="3.877969904s" podCreationTimestamp="2025-11-01 00:45:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:45:22.851548964 +0000 UTC m=+1.437531960" watchObservedRunningTime="2025-11-01 00:45:22.877969904 +0000 UTC m=+1.463952900" Nov 1 00:45:22.897396 kubelet[2626]: I1101 00:45:22.897336 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-16-197" podStartSLOduration=3.897317763 podStartE2EDuration="3.897317763s" podCreationTimestamp="2025-11-01 00:45:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:45:22.878639733 +0000 UTC m=+1.464622729" watchObservedRunningTime="2025-11-01 00:45:22.897317763 +0000 UTC m=+1.483300764" Nov 1 00:45:25.066000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521088 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:45:25.070115 kernel: kauditd_printk_skb: 260 callbacks suppressed Nov 1 00:45:25.070263 kernel: audit: type=1400 audit(1761957925.066:816): avc: denied { watch } for pid=2497 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521088 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:45:25.066000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007d1ac0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:25.092182 kernel: audit: type=1300 audit(1761957925.066:816): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007d1ac0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:25.066000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:25.099607 kernel: audit: type=1327 audit(1761957925.066:816): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:25.408000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:25.410000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:25.424423 kernel: audit: type=1400 audit(1761957925.408:817): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:25.424573 kernel: audit: type=1400 audit(1761957925.410:818): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:25.424624 kernel: audit: type=1300 audit(1761957925.410:818): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012078a0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:25.410000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012078a0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:25.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:25.439572 kernel: audit: type=1327 audit(1761957925.410:818): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:25.439731 kernel: audit: type=1400 audit(1761957925.411:819): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:25.411000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:25.411000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001207900 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:25.453702 kernel: audit: type=1300 audit(1761957925.411:819): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001207900 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:25.453816 kernel: audit: type=1327 audit(1761957925.411:819): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:25.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:25.411000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:25.411000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001207aa0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:25.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:25.408000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0011d42a0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:45:25.408000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:25.786116 amazon-ssm-agent[1754]: 2025-11-01 00:45:25 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Nov 1 00:45:26.623259 kubelet[2626]: I1101 00:45:26.623222 2626 kuberuntime_manager.go:1828] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:45:26.623796 env[1736]: time="2025-11-01T00:45:26.623712196Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:45:26.624255 kubelet[2626]: I1101 00:45:26.624022 2626 kubelet_network.go:47] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:45:27.452793 systemd[1]: Created slice kubepods-besteffort-pod7129dd1d_b1e3_4143_a222_70c7a6c04b23.slice. Nov 1 00:45:27.476875 kubelet[2626]: I1101 00:45:27.476810 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/7129dd1d-b1e3-4143-a222-70c7a6c04b23-kube-proxy\") pod \"kube-proxy-jxvk8\" (UID: \"7129dd1d-b1e3-4143-a222-70c7a6c04b23\") " pod="kube-system/kube-proxy-jxvk8" Nov 1 00:45:27.476875 kubelet[2626]: I1101 00:45:27.476876 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7129dd1d-b1e3-4143-a222-70c7a6c04b23-xtables-lock\") pod \"kube-proxy-jxvk8\" (UID: \"7129dd1d-b1e3-4143-a222-70c7a6c04b23\") " pod="kube-system/kube-proxy-jxvk8" Nov 1 00:45:27.477088 kubelet[2626]: I1101 00:45:27.476906 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7129dd1d-b1e3-4143-a222-70c7a6c04b23-lib-modules\") pod \"kube-proxy-jxvk8\" (UID: \"7129dd1d-b1e3-4143-a222-70c7a6c04b23\") " pod="kube-system/kube-proxy-jxvk8" Nov 1 00:45:27.477088 kubelet[2626]: I1101 00:45:27.476941 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lf76g\" (UniqueName: \"kubernetes.io/projected/7129dd1d-b1e3-4143-a222-70c7a6c04b23-kube-api-access-lf76g\") pod \"kube-proxy-jxvk8\" (UID: \"7129dd1d-b1e3-4143-a222-70c7a6c04b23\") " pod="kube-system/kube-proxy-jxvk8" Nov 1 00:45:27.585155 kubelet[2626]: I1101 00:45:27.585127 2626 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:45:27.690098 systemd[1]: Created slice kubepods-besteffort-pod51b612db_42ab_4946_880e_e4e3c61fcf24.slice. Nov 1 00:45:27.767466 env[1736]: time="2025-11-01T00:45:27.767424746Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jxvk8,Uid:7129dd1d-b1e3-4143-a222-70c7a6c04b23,Namespace:kube-system,Attempt:0,}" Nov 1 00:45:27.779306 kubelet[2626]: I1101 00:45:27.779251 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4hhdr\" (UniqueName: \"kubernetes.io/projected/51b612db-42ab-4946-880e-e4e3c61fcf24-kube-api-access-4hhdr\") pod \"tigera-operator-65cdcdfd6d-j5r2s\" (UID: \"51b612db-42ab-4946-880e-e4e3c61fcf24\") " pod="tigera-operator/tigera-operator-65cdcdfd6d-j5r2s" Nov 1 00:45:27.779306 kubelet[2626]: I1101 00:45:27.779301 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/51b612db-42ab-4946-880e-e4e3c61fcf24-var-lib-calico\") pod \"tigera-operator-65cdcdfd6d-j5r2s\" (UID: \"51b612db-42ab-4946-880e-e4e3c61fcf24\") " pod="tigera-operator/tigera-operator-65cdcdfd6d-j5r2s" Nov 1 00:45:27.798311 env[1736]: time="2025-11-01T00:45:27.798220595Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:45:27.798527 env[1736]: time="2025-11-01T00:45:27.798273478Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:45:27.798527 env[1736]: time="2025-11-01T00:45:27.798305407Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:45:27.798845 env[1736]: time="2025-11-01T00:45:27.798731515Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b485c24f171a510d26e6a0784d69b81c45a039b2b240a3e8719e3da94f409582 pid=2862 runtime=io.containerd.runc.v2 Nov 1 00:45:27.818556 systemd[1]: Started cri-containerd-b485c24f171a510d26e6a0784d69b81c45a039b2b240a3e8719e3da94f409582.scope. Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.845000 audit: BPF prog-id=106 op=LOAD Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2862 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234383563323466313731613531306432366536613037383464363962 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2862 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234383563323466313731613531306432366536613037383464363962 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit: BPF prog-id=107 op=LOAD Nov 1 00:45:27.846000 audit[2873]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003405f0 items=0 ppid=2862 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234383563323466313731613531306432366536613037383464363962 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.846000 audit: BPF prog-id=108 op=LOAD Nov 1 00:45:27.846000 audit[2873]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000340638 items=0 ppid=2862 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234383563323466313731613531306432366536613037383464363962 Nov 1 00:45:27.847000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:45:27.847000 audit: BPF prog-id=107 op=UNLOAD Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { perfmon } for pid=2873 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit[2873]: AVC avc: denied { bpf } for pid=2873 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.847000 audit: BPF prog-id=109 op=LOAD Nov 1 00:45:27.847000 audit[2873]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000340a48 items=0 ppid=2862 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234383563323466313731613531306432366536613037383464363962 Nov 1 00:45:27.870046 env[1736]: time="2025-11-01T00:45:27.869996337Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jxvk8,Uid:7129dd1d-b1e3-4143-a222-70c7a6c04b23,Namespace:kube-system,Attempt:0,} returns sandbox id \"b485c24f171a510d26e6a0784d69b81c45a039b2b240a3e8719e3da94f409582\"" Nov 1 00:45:27.882903 env[1736]: time="2025-11-01T00:45:27.882837199Z" level=info msg="CreateContainer within sandbox \"b485c24f171a510d26e6a0784d69b81c45a039b2b240a3e8719e3da94f409582\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:45:27.917338 env[1736]: time="2025-11-01T00:45:27.917291017Z" level=info msg="CreateContainer within sandbox \"b485c24f171a510d26e6a0784d69b81c45a039b2b240a3e8719e3da94f409582\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"d5c862ef65b14ac8c8dc019e61055f3bb443646154b8043ad422ba709399b71c\"" Nov 1 00:45:27.918313 env[1736]: time="2025-11-01T00:45:27.918274507Z" level=info msg="StartContainer for \"d5c862ef65b14ac8c8dc019e61055f3bb443646154b8043ad422ba709399b71c\"" Nov 1 00:45:27.936411 systemd[1]: Started cri-containerd-d5c862ef65b14ac8c8dc019e61055f3bb443646154b8043ad422ba709399b71c.scope. Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f9574c55978 items=0 ppid=2862 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435633836326566363562313461633863386463303139653631303535 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit: BPF prog-id=110 op=LOAD Nov 1 00:45:27.956000 audit[2904]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00032bd88 items=0 ppid=2862 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435633836326566363562313461633863386463303139653631303535 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit: BPF prog-id=111 op=LOAD Nov 1 00:45:27.956000 audit[2904]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00032bdd8 items=0 ppid=2862 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435633836326566363562313461633863386463303139653631303535 Nov 1 00:45:27.956000 audit: BPF prog-id=111 op=UNLOAD Nov 1 00:45:27.956000 audit: BPF prog-id=110 op=UNLOAD Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:27.956000 audit: BPF prog-id=112 op=LOAD Nov 1 00:45:27.956000 audit[2904]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00032be68 items=0 ppid=2862 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:27.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435633836326566363562313461633863386463303139653631303535 Nov 1 00:45:27.978708 env[1736]: time="2025-11-01T00:45:27.978665173Z" level=info msg="StartContainer for \"d5c862ef65b14ac8c8dc019e61055f3bb443646154b8043ad422ba709399b71c\" returns successfully" Nov 1 00:45:27.999278 env[1736]: time="2025-11-01T00:45:27.999230419Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-65cdcdfd6d-j5r2s,Uid:51b612db-42ab-4946-880e-e4e3c61fcf24,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:45:28.032438 env[1736]: time="2025-11-01T00:45:28.029042783Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:45:28.032623 env[1736]: time="2025-11-01T00:45:28.029096655Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:45:28.032623 env[1736]: time="2025-11-01T00:45:28.029112345Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:45:28.032623 env[1736]: time="2025-11-01T00:45:28.029385628Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/69c5f30b6194338b6baa46e635b5c2423e5e5d624c3c0d105bddf51d89e1aeac pid=2934 runtime=io.containerd.runc.v2 Nov 1 00:45:28.048042 systemd[1]: Started cri-containerd-69c5f30b6194338b6baa46e635b5c2423e5e5d624c3c0d105bddf51d89e1aeac.scope. Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.072000 audit: BPF prog-id=113 op=LOAD Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:28.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633566333062363139343333386236626161343665363335623563 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:28.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633566333062363139343333386236626161343665363335623563 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit: BPF prog-id=114 op=LOAD Nov 1 00:45:28.073000 audit[2944]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000221050 items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:28.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633566333062363139343333386236626161343665363335623563 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit: BPF prog-id=115 op=LOAD Nov 1 00:45:28.073000 audit[2944]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000221098 items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:28.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633566333062363139343333386236626161343665363335623563 Nov 1 00:45:28.073000 audit: BPF prog-id=115 op=UNLOAD Nov 1 00:45:28.073000 audit: BPF prog-id=114 op=UNLOAD Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:28.073000 audit: BPF prog-id=116 op=LOAD Nov 1 00:45:28.073000 audit[2944]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0002214a8 items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:28.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633566333062363139343333386236626161343665363335623563 Nov 1 00:45:28.108963 env[1736]: time="2025-11-01T00:45:28.108913380Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-65cdcdfd6d-j5r2s,Uid:51b612db-42ab-4946-880e-e4e3c61fcf24,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"69c5f30b6194338b6baa46e635b5c2423e5e5d624c3c0d105bddf51d89e1aeac\"" Nov 1 00:45:28.111609 env[1736]: time="2025-11-01T00:45:28.110902209Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:45:29.257000 audit[3004]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.257000 audit[3004]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffca90dcd60 a2=0 a3=7ffca90dcd4c items=0 ppid=2914 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.257000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:45:29.259000 audit[3006]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=3006 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.259000 audit[3006]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb338bf80 a2=0 a3=7fffb338bf6c items=0 ppid=2914 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.259000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:45:29.261000 audit[3008]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=3008 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.261000 audit[3007]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=3007 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.261000 audit[3007]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffe8d40d80 a2=0 a3=5dd91afa5c07d3af items=0 ppid=2914 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.261000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:45:29.261000 audit[3008]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffebd63e780 a2=0 a3=7ffebd63e76c items=0 ppid=2914 pid=3008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.261000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:45:29.263000 audit[3009]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=3009 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.263000 audit[3009]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd32df2b90 a2=0 a3=7ffd32df2b7c items=0 ppid=2914 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.263000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:45:29.263000 audit[3010]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3010 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.263000 audit[3010]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd24706d60 a2=0 a3=7ffd24706d4c items=0 ppid=2914 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.263000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:45:29.371000 audit[3013]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3013 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.371000 audit[3013]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcb73f7560 a2=0 a3=7ffcb73f754c items=0 ppid=2914 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.371000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:45:29.375000 audit[3015]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3015 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.375000 audit[3015]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe5e559af0 a2=0 a3=7ffe5e559adc items=0 ppid=2914 pid=3015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.375000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669636520706F7274616C73002D Nov 1 00:45:29.388000 audit[3018]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.388000 audit[3018]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffde2730ab0 a2=0 a3=7ffde2730a9c items=0 ppid=2914 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.388000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669636520706F7274616C73 Nov 1 00:45:29.389000 audit[3019]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3019 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.389000 audit[3019]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5d5b4720 a2=0 a3=7ffc5d5b470c items=0 ppid=2914 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.389000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:45:29.394000 audit[3021]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.394000 audit[3021]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc290d6650 a2=0 a3=7ffc290d663c items=0 ppid=2914 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.394000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:45:29.395000 audit[3022]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3022 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.395000 audit[3022]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca8d783a0 a2=0 a3=7ffca8d7838c items=0 ppid=2914 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.395000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:45:29.400000 audit[3024]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3024 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.400000 audit[3024]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe2d400f60 a2=0 a3=7ffe2d400f4c items=0 ppid=2914 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.400000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:45:29.404000 audit[3027]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3027 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.404000 audit[3027]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffddab13af0 a2=0 a3=7ffddab13adc items=0 ppid=2914 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.404000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:45:29.405000 audit[3028]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3028 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.405000 audit[3028]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc48dbf6b0 a2=0 a3=7ffc48dbf69c items=0 ppid=2914 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.405000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:45:29.409000 audit[3030]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.409000 audit[3030]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdce3c4480 a2=0 a3=7ffdce3c446c items=0 ppid=2914 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.409000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:45:29.410000 audit[3031]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.410000 audit[3031]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd70a3ccd0 a2=0 a3=7ffd70a3ccbc items=0 ppid=2914 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.410000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:45:29.416000 audit[3033]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3033 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.416000 audit[3033]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff761f6950 a2=0 a3=7fff761f693c items=0 ppid=2914 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.416000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A004B5542452D50524F5859 Nov 1 00:45:29.420000 audit[3036]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.420000 audit[3036]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdd30d0a80 a2=0 a3=7ffdd30d0a6c items=0 ppid=2914 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.420000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A004B5542452D50524F58 Nov 1 00:45:29.424000 audit[3039]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3039 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.424000 audit[3039]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd391e70a0 a2=0 a3=7ffd391e708c items=0 ppid=2914 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.424000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A004B5542452D50524F Nov 1 00:45:29.425000 audit[3040]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.425000 audit[3040]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc74e8c230 a2=0 a3=7ffc74e8c21c items=0 ppid=2914 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.425000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:45:29.429000 audit[3042]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.429000 audit[3042]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd19029a10 a2=0 a3=7ffd190299fc items=0 ppid=2914 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.429000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:45:29.433000 audit[3045]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.433000 audit[3045]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffff45454f0 a2=0 a3=7ffff45454dc items=0 ppid=2914 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.433000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:45:29.435000 audit[3046]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.435000 audit[3046]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff17715990 a2=0 a3=7fff1771597c items=0 ppid=2914 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:45:29.437000 audit[3048]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:45:29.437000 audit[3048]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffeb5783960 a2=0 a3=7ffeb578394c items=0 ppid=2914 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.437000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:45:29.476000 audit[3054]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:29.476000 audit[3054]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe60ca5040 a2=0 a3=7ffe60ca502c items=0 ppid=2914 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.476000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:29.489000 audit[3054]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:29.489000 audit[3054]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe60ca5040 a2=0 a3=7ffe60ca502c items=0 ppid=2914 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.489000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:29.491000 audit[3059]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3059 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.491000 audit[3059]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff37488300 a2=0 a3=7fff374882ec items=0 ppid=2914 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.491000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:45:29.495000 audit[3061]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3061 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.495000 audit[3061]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff28923e20 a2=0 a3=7fff28923e0c items=0 ppid=2914 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.495000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669636520706F7274616C73 Nov 1 00:45:29.501000 audit[3064]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3064 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.501000 audit[3064]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd445f68a0 a2=0 a3=7ffd445f688c items=0 ppid=2914 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.501000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669636520706F7274616C Nov 1 00:45:29.504000 audit[3065]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.504000 audit[3065]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb10bafb0 a2=0 a3=7ffeb10baf9c items=0 ppid=2914 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.504000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:45:29.507000 audit[3067]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3067 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.507000 audit[3067]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffffac52b10 a2=0 a3=7ffffac52afc items=0 ppid=2914 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.507000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:45:29.509000 audit[3068]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3068 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.509000 audit[3068]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5259f950 a2=0 a3=7ffd5259f93c items=0 ppid=2914 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.509000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:45:29.514000 audit[3070]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3070 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.514000 audit[3070]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc10de7410 a2=0 a3=7ffc10de73fc items=0 ppid=2914 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.514000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:45:29.518000 audit[3073]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.518000 audit[3073]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd856b9120 a2=0 a3=7ffd856b910c items=0 ppid=2914 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:45:29.520000 audit[3074]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3074 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.520000 audit[3074]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1a13bf80 a2=0 a3=7ffc1a13bf6c items=0 ppid=2914 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.520000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:45:29.523000 audit[3076]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3076 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.523000 audit[3076]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd8e12cd20 a2=0 a3=7ffd8e12cd0c items=0 ppid=2914 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.523000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:45:29.524000 audit[3077]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3077 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.524000 audit[3077]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe4c402a30 a2=0 a3=7ffe4c402a1c items=0 ppid=2914 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.524000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:45:29.528000 audit[3079]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.528000 audit[3079]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe074fefb0 a2=0 a3=7ffe074fef9c items=0 ppid=2914 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A004B5542452D50524F58 Nov 1 00:45:29.532000 audit[3082]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.532000 audit[3082]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffde2734800 a2=0 a3=7ffde27347ec items=0 ppid=2914 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.532000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A004B5542452D50524F Nov 1 00:45:29.537000 audit[3085]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3085 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.537000 audit[3085]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd7e9aa740 a2=0 a3=7ffd7e9aa72c items=0 ppid=2914 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.537000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A004B5542452D5052 Nov 1 00:45:29.538000 audit[3086]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3086 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.538000 audit[3086]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd337be440 a2=0 a3=7ffd337be42c items=0 ppid=2914 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.538000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:45:29.543000 audit[3088]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.543000 audit[3088]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe7f802a60 a2=0 a3=7ffe7f802a4c items=0 ppid=2914 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.543000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:45:29.549000 audit[3091]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3091 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.549000 audit[3091]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd0ce98d50 a2=0 a3=7ffd0ce98d3c items=0 ppid=2914 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.549000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:45:29.551000 audit[3092]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3092 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.551000 audit[3092]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5636acf0 a2=0 a3=7ffc5636acdc items=0 ppid=2914 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.551000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:45:29.554000 audit[3094]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3094 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.554000 audit[3094]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffee098c580 a2=0 a3=7ffee098c56c items=0 ppid=2914 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.554000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:45:29.556000 audit[3095]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3095 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.556000 audit[3095]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9c648b30 a2=0 a3=7fff9c648b1c items=0 ppid=2914 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.556000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:45:29.559000 audit[3097]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3097 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.559000 audit[3097]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff983ace80 a2=0 a3=7fff983ace6c items=0 ppid=2914 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.559000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:45:29.568000 audit[3100]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3100 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:45:29.568000 audit[3100]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffeb1dda450 a2=0 a3=7ffeb1dda43c items=0 ppid=2914 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.568000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:45:29.572000 audit[3102]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:45:29.572000 audit[3102]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffca37f9fa0 a2=0 a3=7ffca37f9f8c items=0 ppid=2914 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.572000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:29.572000 audit[3102]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:45:29.572000 audit[3102]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffca37f9fa0 a2=0 a3=7ffca37f9f8c items=0 ppid=2914 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:29.572000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:29.870207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3309550535.mount: Deactivated successfully. Nov 1 00:45:31.146639 env[1736]: time="2025-11-01T00:45:31.146580269Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:31.151132 env[1736]: time="2025-11-01T00:45:31.151089035Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:31.153793 env[1736]: time="2025-11-01T00:45:31.153737737Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:31.156500 env[1736]: time="2025-11-01T00:45:31.156456128Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:31.157137 env[1736]: time="2025-11-01T00:45:31.157103011Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\"" Nov 1 00:45:31.180504 env[1736]: time="2025-11-01T00:45:31.180456067Z" level=info msg="CreateContainer within sandbox \"69c5f30b6194338b6baa46e635b5c2423e5e5d624c3c0d105bddf51d89e1aeac\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:45:31.202276 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount127539644.mount: Deactivated successfully. Nov 1 00:45:31.208576 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount948573951.mount: Deactivated successfully. Nov 1 00:45:31.217380 env[1736]: time="2025-11-01T00:45:31.217324357Z" level=info msg="CreateContainer within sandbox \"69c5f30b6194338b6baa46e635b5c2423e5e5d624c3c0d105bddf51d89e1aeac\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9\"" Nov 1 00:45:31.218117 env[1736]: time="2025-11-01T00:45:31.218071916Z" level=info msg="StartContainer for \"269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9\"" Nov 1 00:45:31.248510 systemd[1]: Started cri-containerd-269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9.scope. Nov 1 00:45:31.277530 kernel: kauditd_printk_skb: 315 callbacks suppressed Nov 1 00:45:31.277703 kernel: audit: type=1400 audit(1761957931.267:914): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284876 kernel: audit: type=1400 audit(1761957931.267:915): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.298908 kernel: audit: type=1400 audit(1761957931.267:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.299062 kernel: audit: type=1400 audit(1761957931.267:917): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.306231 kernel: audit: type=1400 audit(1761957931.267:918): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.312071 kernel: audit: type=1400 audit(1761957931.267:919): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.319178 kernel: audit: type=1400 audit(1761957931.267:920): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.326349 kernel: audit: type=1400 audit(1761957931.267:921): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.334245 kernel: audit: type=1400 audit(1761957931.267:922): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.341632 kernel: audit: type=1400 audit(1761957931.275:923): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.275000 audit: BPF prog-id=117 op=LOAD Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2934 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:31.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236396134613639346135313436386561616530373930386538323464 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2934 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:31.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236396134613639346135313436386561616530373930386538323464 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.276000 audit: BPF prog-id=118 op=LOAD Nov 1 00:45:31.276000 audit[3110]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002cbcf0 items=0 ppid=2934 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:31.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236396134613639346135313436386561616530373930386538323464 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.284000 audit: BPF prog-id=119 op=LOAD Nov 1 00:45:31.284000 audit[3110]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002cbd38 items=0 ppid=2934 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:31.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236396134613639346135313436386561616530373930386538323464 Nov 1 00:45:31.290000 audit: BPF prog-id=119 op=UNLOAD Nov 1 00:45:31.290000 audit: BPF prog-id=118 op=UNLOAD Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { perfmon } for pid=3110 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit[3110]: AVC avc: denied { bpf } for pid=3110 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:31.290000 audit: BPF prog-id=120 op=LOAD Nov 1 00:45:31.290000 audit[3110]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000328148 items=0 ppid=2934 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:31.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236396134613639346135313436386561616530373930386538323464 Nov 1 00:45:31.351329 env[1736]: time="2025-11-01T00:45:31.351268013Z" level=info msg="StartContainer for \"269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9\" returns successfully" Nov 1 00:45:31.681416 kubelet[2626]: I1101 00:45:31.681354 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-jxvk8" podStartSLOduration=4.68133632 podStartE2EDuration="4.68133632s" podCreationTimestamp="2025-11-01 00:45:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:45:28.830556489 +0000 UTC m=+7.416539487" watchObservedRunningTime="2025-11-01 00:45:31.68133632 +0000 UTC m=+10.267319315" Nov 1 00:45:38.519799 sudo[2008]: pam_unix(sudo:session): session closed for user root Nov 1 00:45:38.532278 kernel: kauditd_printk_skb: 47 callbacks suppressed Nov 1 00:45:38.532484 kernel: audit: type=1106 audit(1761957938.518:932): pid=2008 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:45:38.518000 audit[2008]: USER_END pid=2008 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:45:38.518000 audit[2008]: CRED_DISP pid=2008 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:45:38.546169 kernel: audit: type=1104 audit(1761957938.518:933): pid=2008 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:45:38.571480 sshd[2005]: pam_unix(sshd:session): session closed for user core Nov 1 00:45:38.589953 kernel: audit: type=1106 audit(1761957938.575:934): pid=2005 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:45:38.575000 audit[2005]: USER_END pid=2005 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:45:38.605366 kernel: audit: type=1104 audit(1761957938.575:935): pid=2005 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:45:38.575000 audit[2005]: CRED_DISP pid=2005 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:45:38.596471 systemd[1]: sshd@6-172.31.16.197:22-147.75.109.163:48428.service: Deactivated successfully. Nov 1 00:45:38.597419 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:45:38.597617 systemd[1]: session-7.scope: Consumed 6.978s CPU time. Nov 1 00:45:38.604712 systemd-logind[1726]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:45:38.615951 kernel: audit: type=1131 audit(1761957938.594:936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.197:22-147.75.109.163:48428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:38.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.197:22-147.75.109.163:48428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:38.615300 systemd-logind[1726]: Removed session 7. Nov 1 00:45:39.664000 audit[3187]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:39.683279 kernel: audit: type=1325 audit(1761957939.664:937): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:39.683418 kernel: audit: type=1300 audit(1761957939.664:937): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd3859e5c0 a2=0 a3=7ffd3859e5ac items=0 ppid=2914 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:39.664000 audit[3187]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd3859e5c0 a2=0 a3=7ffd3859e5ac items=0 ppid=2914 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:39.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:39.694786 kernel: audit: type=1327 audit(1761957939.664:937): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:39.694000 audit[3187]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:39.701787 kernel: audit: type=1325 audit(1761957939.694:938): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:39.694000 audit[3187]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd3859e5c0 a2=0 a3=0 items=0 ppid=2914 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:39.721773 kernel: audit: type=1300 audit(1761957939.694:938): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd3859e5c0 a2=0 a3=0 items=0 ppid=2914 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:39.694000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:40.720000 audit[3189]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3189 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:40.720000 audit[3189]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffedb060c40 a2=0 a3=7ffedb060c2c items=0 ppid=2914 pid=3189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:40.720000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:40.727000 audit[3189]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3189 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:40.727000 audit[3189]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffedb060c40 a2=0 a3=0 items=0 ppid=2914 pid=3189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:40.727000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:42.846000 audit[3193]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3193 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:42.846000 audit[3193]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffff414cb00 a2=0 a3=7ffff414caec items=0 ppid=2914 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:42.846000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:42.852000 audit[3193]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3193 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:42.852000 audit[3193]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffff414cb00 a2=0 a3=0 items=0 ppid=2914 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:42.852000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:43.919336 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:45:43.919513 kernel: audit: type=1325 audit(1761957943.910:943): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:43.910000 audit[3197]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:43.910000 audit[3197]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff4b943ec0 a2=0 a3=7fff4b943eac items=0 ppid=2914 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:43.937533 kernel: audit: type=1300 audit(1761957943.910:943): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff4b943ec0 a2=0 a3=7fff4b943eac items=0 ppid=2914 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:43.937685 kernel: audit: type=1327 audit(1761957943.910:943): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:43.910000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:43.937000 audit[3197]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:43.944906 kernel: audit: type=1325 audit(1761957943.937:944): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:43.937000 audit[3197]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff4b943ec0 a2=0 a3=0 items=0 ppid=2914 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:43.961864 kernel: audit: type=1300 audit(1761957943.937:944): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff4b943ec0 a2=0 a3=0 items=0 ppid=2914 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:43.962010 kernel: audit: type=1327 audit(1761957943.937:944): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:43.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:44.983704 kubelet[2626]: I1101 00:45:44.983618 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-65cdcdfd6d-j5r2s" podStartSLOduration=14.935960584 podStartE2EDuration="17.983599426s" podCreationTimestamp="2025-11-01 00:45:27 +0000 UTC" firstStartedPulling="2025-11-01 00:45:28.110501915 +0000 UTC m=+6.696484888" lastFinishedPulling="2025-11-01 00:45:31.158140757 +0000 UTC m=+9.744123730" observedRunningTime="2025-11-01 00:45:31.815211539 +0000 UTC m=+10.401194534" watchObservedRunningTime="2025-11-01 00:45:44.983599426 +0000 UTC m=+23.569582422" Nov 1 00:45:44.992268 systemd[1]: Created slice kubepods-besteffort-pod65b8759c_8318_4a2e_a35a_ac92b8194fab.slice. Nov 1 00:45:44.997695 kubelet[2626]: I1101 00:45:44.997651 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/65b8759c-8318-4a2e-a35a-ac92b8194fab-tigera-ca-bundle\") pod \"calico-typha-95665f8d6-fvqnz\" (UID: \"65b8759c-8318-4a2e-a35a-ac92b8194fab\") " pod="calico-system/calico-typha-95665f8d6-fvqnz" Nov 1 00:45:44.997907 kubelet[2626]: I1101 00:45:44.997739 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/65b8759c-8318-4a2e-a35a-ac92b8194fab-typha-certs\") pod \"calico-typha-95665f8d6-fvqnz\" (UID: \"65b8759c-8318-4a2e-a35a-ac92b8194fab\") " pod="calico-system/calico-typha-95665f8d6-fvqnz" Nov 1 00:45:44.997907 kubelet[2626]: I1101 00:45:44.997815 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2ngws\" (UniqueName: \"kubernetes.io/projected/65b8759c-8318-4a2e-a35a-ac92b8194fab-kube-api-access-2ngws\") pod \"calico-typha-95665f8d6-fvqnz\" (UID: \"65b8759c-8318-4a2e-a35a-ac92b8194fab\") " pod="calico-system/calico-typha-95665f8d6-fvqnz" Nov 1 00:45:45.004000 audit[3199]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=3199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:45.004000 audit[3199]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdef13c4a0 a2=0 a3=7ffdef13c48c items=0 ppid=2914 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.024368 kernel: audit: type=1325 audit(1761957945.004:945): table=filter:97 family=2 entries=21 op=nft_register_rule pid=3199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:45.024520 kernel: audit: type=1300 audit(1761957945.004:945): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdef13c4a0 a2=0 a3=7ffdef13c48c items=0 ppid=2914 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.004000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:45.033809 kernel: audit: type=1327 audit(1761957945.004:945): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:45.025000 audit[3199]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:45.041782 kernel: audit: type=1325 audit(1761957945.025:946): table=nat:98 family=2 entries=12 op=nft_register_rule pid=3199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:45.025000 audit[3199]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdef13c4a0 a2=0 a3=0 items=0 ppid=2914 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.025000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:45.193555 systemd[1]: Created slice kubepods-besteffort-pod3fe5fafd_bc94_4671_8429_179b414966e2.slice. Nov 1 00:45:45.199588 kubelet[2626]: I1101 00:45:45.199534 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-var-run-calico\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.199588 kubelet[2626]: I1101 00:45:45.199594 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-cni-log-dir\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.199953 kubelet[2626]: I1101 00:45:45.199616 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-cni-net-dir\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.199953 kubelet[2626]: I1101 00:45:45.199639 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-flexvol-driver-host\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.199953 kubelet[2626]: I1101 00:45:45.199665 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-policysync\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.199953 kubelet[2626]: I1101 00:45:45.199687 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-cni-bin-dir\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.199953 kubelet[2626]: I1101 00:45:45.199709 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/3fe5fafd-bc94-4671-8429-179b414966e2-node-certs\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.200184 kubelet[2626]: I1101 00:45:45.199731 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-xtables-lock\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.200184 kubelet[2626]: I1101 00:45:45.199985 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-var-lib-calico\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.200184 kubelet[2626]: I1101 00:45:45.200025 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3fe5fafd-bc94-4671-8429-179b414966e2-lib-modules\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.200184 kubelet[2626]: I1101 00:45:45.200058 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tkxc4\" (UniqueName: \"kubernetes.io/projected/3fe5fafd-bc94-4671-8429-179b414966e2-kube-api-access-tkxc4\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.200184 kubelet[2626]: I1101 00:45:45.200082 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3fe5fafd-bc94-4671-8429-179b414966e2-tigera-ca-bundle\") pod \"calico-node-hkx7p\" (UID: \"3fe5fafd-bc94-4671-8429-179b414966e2\") " pod="calico-system/calico-node-hkx7p" Nov 1 00:45:45.298581 env[1736]: time="2025-11-01T00:45:45.298105719Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-95665f8d6-fvqnz,Uid:65b8759c-8318-4a2e-a35a-ac92b8194fab,Namespace:calico-system,Attempt:0,}" Nov 1 00:45:45.326704 kubelet[2626]: E1101 00:45:45.326672 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.326704 kubelet[2626]: W1101 00:45:45.326701 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.326945 kubelet[2626]: E1101 00:45:45.326725 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.333688 env[1736]: time="2025-11-01T00:45:45.333605880Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:45:45.333860 env[1736]: time="2025-11-01T00:45:45.333705757Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:45:45.333860 env[1736]: time="2025-11-01T00:45:45.333736739Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:45:45.335406 env[1736]: time="2025-11-01T00:45:45.333977914Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c02feefe2b00635fe637ae1d85b6b430783e447e7d30169e34c0278f47a51154 pid=3209 runtime=io.containerd.runc.v2 Nov 1 00:45:45.359069 kubelet[2626]: E1101 00:45:45.357244 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.359069 kubelet[2626]: W1101 00:45:45.357273 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.359069 kubelet[2626]: E1101 00:45:45.357299 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.369986 systemd[1]: Started cri-containerd-c02feefe2b00635fe637ae1d85b6b430783e447e7d30169e34c0278f47a51154.scope. Nov 1 00:45:45.500587 env[1736]: time="2025-11-01T00:45:45.500532696Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-hkx7p,Uid:3fe5fafd-bc94-4671-8429-179b414966e2,Namespace:calico-system,Attempt:0,}" Nov 1 00:45:45.509083 kubelet[2626]: E1101 00:45:45.509032 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:45:45.525898 env[1736]: time="2025-11-01T00:45:45.525804545Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:45:45.526084 env[1736]: time="2025-11-01T00:45:45.525912023Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:45:45.526084 env[1736]: time="2025-11-01T00:45:45.525942481Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:45:45.526202 env[1736]: time="2025-11-01T00:45:45.526118993Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf pid=3247 runtime=io.containerd.runc.v2 Nov 1 00:45:45.562046 systemd[1]: Started cri-containerd-7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf.scope. Nov 1 00:45:45.592900 kubelet[2626]: E1101 00:45:45.592871 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.592900 kubelet[2626]: W1101 00:45:45.592898 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.593140 kubelet[2626]: E1101 00:45:45.592922 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.593198 kubelet[2626]: E1101 00:45:45.593164 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.593198 kubelet[2626]: W1101 00:45:45.593175 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.593198 kubelet[2626]: E1101 00:45:45.593188 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.593812 kubelet[2626]: E1101 00:45:45.593636 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.593812 kubelet[2626]: W1101 00:45:45.593650 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.593812 kubelet[2626]: E1101 00:45:45.593663 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.594000 audit: BPF prog-id=121 op=LOAD Nov 1 00:45:45.596795 kubelet[2626]: E1101 00:45:45.594178 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.596795 kubelet[2626]: W1101 00:45:45.594192 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.596795 kubelet[2626]: E1101 00:45:45.594206 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.596795 kubelet[2626]: E1101 00:45:45.596073 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.596795 kubelet[2626]: W1101 00:45:45.596085 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.596795 kubelet[2626]: E1101 00:45:45.596099 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3247 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363164616466376164366665656130663162666130623631353534 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3247 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363164616466376164366665656130663162666130623631353534 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit: BPF prog-id=122 op=LOAD Nov 1 00:45:45.595000 audit[3261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002c5cd0 items=0 ppid=3247 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363164616466376164366665656130663162666130623631353534 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit: BPF prog-id=123 op=LOAD Nov 1 00:45:45.595000 audit[3261]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002c5d18 items=0 ppid=3247 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363164616466376164366665656130663162666130623631353534 Nov 1 00:45:45.595000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:45:45.595000 audit: BPF prog-id=122 op=UNLOAD Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { perfmon } for pid=3261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit[3261]: AVC avc: denied { bpf } for pid=3261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.595000 audit: BPF prog-id=124 op=LOAD Nov 1 00:45:45.595000 audit[3261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000334128 items=0 ppid=3247 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363164616466376164366665656130663162666130623631353534 Nov 1 00:45:45.604256 kubelet[2626]: E1101 00:45:45.599915 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.604256 kubelet[2626]: W1101 00:45:45.599932 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.604256 kubelet[2626]: E1101 00:45:45.599950 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.604256 kubelet[2626]: E1101 00:45:45.600191 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.604256 kubelet[2626]: W1101 00:45:45.600203 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.604256 kubelet[2626]: E1101 00:45:45.600217 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.604256 kubelet[2626]: E1101 00:45:45.600424 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.604256 kubelet[2626]: W1101 00:45:45.600433 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.604256 kubelet[2626]: E1101 00:45:45.600446 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.604256 kubelet[2626]: E1101 00:45:45.600653 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.605182 kubelet[2626]: W1101 00:45:45.600662 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.605182 kubelet[2626]: E1101 00:45:45.600676 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.605182 kubelet[2626]: E1101 00:45:45.600912 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.605182 kubelet[2626]: W1101 00:45:45.600921 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.605182 kubelet[2626]: E1101 00:45:45.600933 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.605182 kubelet[2626]: E1101 00:45:45.601115 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.605182 kubelet[2626]: W1101 00:45:45.601124 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.605182 kubelet[2626]: E1101 00:45:45.601135 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.605182 kubelet[2626]: E1101 00:45:45.604298 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.605182 kubelet[2626]: W1101 00:45:45.604312 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.605830 kubelet[2626]: E1101 00:45:45.604328 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.605830 kubelet[2626]: E1101 00:45:45.604631 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.605830 kubelet[2626]: W1101 00:45:45.604643 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.605830 kubelet[2626]: E1101 00:45:45.604657 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.605830 kubelet[2626]: E1101 00:45:45.604886 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.605830 kubelet[2626]: W1101 00:45:45.604896 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.605830 kubelet[2626]: E1101 00:45:45.604908 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.605830 kubelet[2626]: E1101 00:45:45.605164 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.605830 kubelet[2626]: W1101 00:45:45.605185 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.605830 kubelet[2626]: E1101 00:45:45.605199 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.606481 kubelet[2626]: E1101 00:45:45.605434 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.606481 kubelet[2626]: W1101 00:45:45.605444 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.606481 kubelet[2626]: E1101 00:45:45.605456 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.606481 kubelet[2626]: E1101 00:45:45.605695 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.606481 kubelet[2626]: W1101 00:45:45.605706 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.606481 kubelet[2626]: E1101 00:45:45.605718 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.606481 kubelet[2626]: E1101 00:45:45.606091 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.606481 kubelet[2626]: W1101 00:45:45.606103 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.606481 kubelet[2626]: E1101 00:45:45.606115 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.606481 kubelet[2626]: E1101 00:45:45.606330 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.606946 kubelet[2626]: W1101 00:45:45.606343 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.606946 kubelet[2626]: E1101 00:45:45.606355 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.606946 kubelet[2626]: E1101 00:45:45.606557 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.606946 kubelet[2626]: W1101 00:45:45.606566 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.606946 kubelet[2626]: E1101 00:45:45.606577 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.606946 kubelet[2626]: E1101 00:45:45.606894 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.606946 kubelet[2626]: W1101 00:45:45.606904 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.606946 kubelet[2626]: E1101 00:45:45.606916 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.606946 kubelet[2626]: I1101 00:45:45.606945 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/a9ee1226-e5f0-4660-960b-3308581cda89-varrun\") pod \"csi-node-driver-k2xb7\" (UID: \"a9ee1226-e5f0-4660-960b-3308581cda89\") " pod="calico-system/csi-node-driver-k2xb7" Nov 1 00:45:45.609839 kubelet[2626]: E1101 00:45:45.607452 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.609839 kubelet[2626]: W1101 00:45:45.607466 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.609839 kubelet[2626]: E1101 00:45:45.607479 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.609839 kubelet[2626]: I1101 00:45:45.607507 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/a9ee1226-e5f0-4660-960b-3308581cda89-kubelet-dir\") pod \"csi-node-driver-k2xb7\" (UID: \"a9ee1226-e5f0-4660-960b-3308581cda89\") " pod="calico-system/csi-node-driver-k2xb7" Nov 1 00:45:45.609839 kubelet[2626]: E1101 00:45:45.608040 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.609839 kubelet[2626]: W1101 00:45:45.608053 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.609839 kubelet[2626]: E1101 00:45:45.608066 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.609839 kubelet[2626]: I1101 00:45:45.608095 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j44qw\" (UniqueName: \"kubernetes.io/projected/a9ee1226-e5f0-4660-960b-3308581cda89-kube-api-access-j44qw\") pod \"csi-node-driver-k2xb7\" (UID: \"a9ee1226-e5f0-4660-960b-3308581cda89\") " pod="calico-system/csi-node-driver-k2xb7" Nov 1 00:45:45.609839 kubelet[2626]: E1101 00:45:45.608984 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.610501 kubelet[2626]: W1101 00:45:45.608997 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.610501 kubelet[2626]: E1101 00:45:45.609010 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.610501 kubelet[2626]: I1101 00:45:45.609035 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/a9ee1226-e5f0-4660-960b-3308581cda89-registration-dir\") pod \"csi-node-driver-k2xb7\" (UID: \"a9ee1226-e5f0-4660-960b-3308581cda89\") " pod="calico-system/csi-node-driver-k2xb7" Nov 1 00:45:45.610501 kubelet[2626]: E1101 00:45:45.609823 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.610501 kubelet[2626]: W1101 00:45:45.609835 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.610501 kubelet[2626]: E1101 00:45:45.609849 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.610501 kubelet[2626]: I1101 00:45:45.609983 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/a9ee1226-e5f0-4660-960b-3308581cda89-socket-dir\") pod \"csi-node-driver-k2xb7\" (UID: \"a9ee1226-e5f0-4660-960b-3308581cda89\") " pod="calico-system/csi-node-driver-k2xb7" Nov 1 00:45:45.610501 kubelet[2626]: E1101 00:45:45.610063 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.618163 kubelet[2626]: W1101 00:45:45.610072 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.618163 kubelet[2626]: E1101 00:45:45.610085 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.618163 kubelet[2626]: E1101 00:45:45.610301 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.618163 kubelet[2626]: W1101 00:45:45.610312 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.618163 kubelet[2626]: E1101 00:45:45.610324 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.618163 kubelet[2626]: E1101 00:45:45.610541 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.618163 kubelet[2626]: W1101 00:45:45.610551 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.618163 kubelet[2626]: E1101 00:45:45.610562 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.618163 kubelet[2626]: E1101 00:45:45.610831 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.618163 kubelet[2626]: W1101 00:45:45.610842 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.618823 kubelet[2626]: E1101 00:45:45.610855 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.618823 kubelet[2626]: E1101 00:45:45.611099 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.618823 kubelet[2626]: W1101 00:45:45.611110 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.618823 kubelet[2626]: E1101 00:45:45.611122 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.618823 kubelet[2626]: E1101 00:45:45.611318 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.618823 kubelet[2626]: W1101 00:45:45.611327 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.618823 kubelet[2626]: E1101 00:45:45.611337 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.618823 kubelet[2626]: E1101 00:45:45.611524 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.618823 kubelet[2626]: W1101 00:45:45.611532 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.618823 kubelet[2626]: E1101 00:45:45.611542 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.619266 kubelet[2626]: E1101 00:45:45.611717 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.619266 kubelet[2626]: W1101 00:45:45.611726 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.619266 kubelet[2626]: E1101 00:45:45.611735 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.619266 kubelet[2626]: E1101 00:45:45.611953 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.619266 kubelet[2626]: W1101 00:45:45.611962 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.619266 kubelet[2626]: E1101 00:45:45.611972 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.619266 kubelet[2626]: E1101 00:45:45.617597 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.619266 kubelet[2626]: W1101 00:45:45.617614 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.619266 kubelet[2626]: E1101 00:45:45.617633 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.627865 env[1736]: time="2025-11-01T00:45:45.627811811Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-hkx7p,Uid:3fe5fafd-bc94-4671-8429-179b414966e2,Namespace:calico-system,Attempt:0,} returns sandbox id \"7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf\"" Nov 1 00:45:45.630331 env[1736]: time="2025-11-01T00:45:45.630070297Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:45:45.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.642000 audit: BPF prog-id=125 op=LOAD Nov 1 00:45:45.643000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.643000 audit[3218]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3209 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330326665656665326230303633356665363337616531643835623662 Nov 1 00:45:45.643000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.643000 audit[3218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3209 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330326665656665326230303633356665363337616531643835623662 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit: BPF prog-id=126 op=LOAD Nov 1 00:45:45.644000 audit[3218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000381550 items=0 ppid=3209 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330326665656665326230303633356665363337616531643835623662 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit: BPF prog-id=127 op=LOAD Nov 1 00:45:45.644000 audit[3218]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000381598 items=0 ppid=3209 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330326665656665326230303633356665363337616531643835623662 Nov 1 00:45:45.644000 audit: BPF prog-id=127 op=UNLOAD Nov 1 00:45:45.644000 audit: BPF prog-id=126 op=UNLOAD Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { perfmon } for pid=3218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit[3218]: AVC avc: denied { bpf } for pid=3218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:45.644000 audit: BPF prog-id=128 op=LOAD Nov 1 00:45:45.644000 audit[3218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003819a8 items=0 ppid=3209 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:45.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330326665656665326230303633356665363337616531643835623662 Nov 1 00:45:45.711954 kubelet[2626]: E1101 00:45:45.711110 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.711954 kubelet[2626]: W1101 00:45:45.711142 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.711954 kubelet[2626]: E1101 00:45:45.711168 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.711954 kubelet[2626]: E1101 00:45:45.711482 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.711954 kubelet[2626]: W1101 00:45:45.711493 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.711954 kubelet[2626]: E1101 00:45:45.711508 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.712340 env[1736]: time="2025-11-01T00:45:45.711544392Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-95665f8d6-fvqnz,Uid:65b8759c-8318-4a2e-a35a-ac92b8194fab,Namespace:calico-system,Attempt:0,} returns sandbox id \"c02feefe2b00635fe637ae1d85b6b430783e447e7d30169e34c0278f47a51154\"" Nov 1 00:45:45.712687 kubelet[2626]: E1101 00:45:45.712537 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.712687 kubelet[2626]: W1101 00:45:45.712550 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.712687 kubelet[2626]: E1101 00:45:45.712566 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.713444 kubelet[2626]: E1101 00:45:45.713428 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.713560 kubelet[2626]: W1101 00:45:45.713549 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.713648 kubelet[2626]: E1101 00:45:45.713636 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.714025 kubelet[2626]: E1101 00:45:45.714008 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.714025 kubelet[2626]: W1101 00:45:45.714025 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.714176 kubelet[2626]: E1101 00:45:45.714040 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.715547 kubelet[2626]: E1101 00:45:45.714258 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.715547 kubelet[2626]: W1101 00:45:45.714270 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.715547 kubelet[2626]: E1101 00:45:45.714281 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.715547 kubelet[2626]: E1101 00:45:45.714474 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.715547 kubelet[2626]: W1101 00:45:45.714482 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.715547 kubelet[2626]: E1101 00:45:45.714492 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.715547 kubelet[2626]: E1101 00:45:45.714669 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.715547 kubelet[2626]: W1101 00:45:45.714677 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.715547 kubelet[2626]: E1101 00:45:45.714689 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.715547 kubelet[2626]: E1101 00:45:45.714967 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.716120 kubelet[2626]: W1101 00:45:45.714976 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.716120 kubelet[2626]: E1101 00:45:45.714987 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.716120 kubelet[2626]: E1101 00:45:45.715194 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.716120 kubelet[2626]: W1101 00:45:45.715204 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.716120 kubelet[2626]: E1101 00:45:45.715215 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.716120 kubelet[2626]: E1101 00:45:45.715430 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.716120 kubelet[2626]: W1101 00:45:45.715439 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.716120 kubelet[2626]: E1101 00:45:45.715450 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.716120 kubelet[2626]: E1101 00:45:45.715812 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.716120 kubelet[2626]: W1101 00:45:45.715823 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.716589 kubelet[2626]: E1101 00:45:45.715838 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.716589 kubelet[2626]: E1101 00:45:45.716042 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.716589 kubelet[2626]: W1101 00:45:45.716052 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.716589 kubelet[2626]: E1101 00:45:45.716063 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.716589 kubelet[2626]: E1101 00:45:45.716254 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.716589 kubelet[2626]: W1101 00:45:45.716262 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.716589 kubelet[2626]: E1101 00:45:45.716273 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.716589 kubelet[2626]: E1101 00:45:45.716473 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.716589 kubelet[2626]: W1101 00:45:45.716482 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.716589 kubelet[2626]: E1101 00:45:45.716492 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.717056 kubelet[2626]: E1101 00:45:45.716722 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.717056 kubelet[2626]: W1101 00:45:45.716731 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.717056 kubelet[2626]: E1101 00:45:45.716741 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.717056 kubelet[2626]: E1101 00:45:45.716966 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.717056 kubelet[2626]: W1101 00:45:45.716975 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.717056 kubelet[2626]: E1101 00:45:45.716986 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.717333 kubelet[2626]: E1101 00:45:45.717253 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.717333 kubelet[2626]: W1101 00:45:45.717263 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.717333 kubelet[2626]: E1101 00:45:45.717274 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.717485 kubelet[2626]: E1101 00:45:45.717476 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.717538 kubelet[2626]: W1101 00:45:45.717485 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.717538 kubelet[2626]: E1101 00:45:45.717495 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.720155 kubelet[2626]: E1101 00:45:45.717698 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.720155 kubelet[2626]: W1101 00:45:45.717707 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.720155 kubelet[2626]: E1101 00:45:45.717719 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.720155 kubelet[2626]: E1101 00:45:45.717980 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.720155 kubelet[2626]: W1101 00:45:45.717989 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.720155 kubelet[2626]: E1101 00:45:45.718003 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.720155 kubelet[2626]: E1101 00:45:45.718223 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.720155 kubelet[2626]: W1101 00:45:45.718233 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.720155 kubelet[2626]: E1101 00:45:45.718245 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.720155 kubelet[2626]: E1101 00:45:45.718727 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.720634 kubelet[2626]: W1101 00:45:45.718738 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.720634 kubelet[2626]: E1101 00:45:45.720083 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.720634 kubelet[2626]: E1101 00:45:45.720337 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.720634 kubelet[2626]: W1101 00:45:45.720349 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.720634 kubelet[2626]: E1101 00:45:45.720362 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.720634 kubelet[2626]: E1101 00:45:45.720590 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.720634 kubelet[2626]: W1101 00:45:45.720599 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.720634 kubelet[2626]: E1101 00:45:45.720611 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:45.730040 kubelet[2626]: E1101 00:45:45.730009 2626 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:45:45.730040 kubelet[2626]: W1101 00:45:45.730031 2626 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:45:45.730230 kubelet[2626]: E1101 00:45:45.730053 2626 plugins.go:697] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:45:46.070000 audit[3354]: NETFILTER_CFG table=filter:99 family=2 entries=22 op=nft_register_rule pid=3354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:46.070000 audit[3354]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffcf573e8f0 a2=0 a3=7ffcf573e8dc items=0 ppid=2914 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:46.070000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:46.074000 audit[3354]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:46.074000 audit[3354]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcf573e8f0 a2=0 a3=0 items=0 ppid=2914 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:46.074000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:45:46.779127 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2485872993.mount: Deactivated successfully. Nov 1 00:45:46.930272 env[1736]: time="2025-11-01T00:45:46.930220422Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:46.932453 env[1736]: time="2025-11-01T00:45:46.932418250Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:46.934292 env[1736]: time="2025-11-01T00:45:46.934252926Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:46.936139 env[1736]: time="2025-11-01T00:45:46.936107054Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:46.936561 env[1736]: time="2025-11-01T00:45:46.936534953Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5\"" Nov 1 00:45:46.938077 env[1736]: time="2025-11-01T00:45:46.938050854Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:45:46.942525 env[1736]: time="2025-11-01T00:45:46.942459495Z" level=info msg="CreateContainer within sandbox \"7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:45:46.955715 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1402264958.mount: Deactivated successfully. Nov 1 00:45:46.963217 env[1736]: time="2025-11-01T00:45:46.963171383Z" level=info msg="CreateContainer within sandbox \"7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"a524d9edc36addb6bbcd05f45a7683921c6d9378845d0d5b9dd18d37547b38e2\"" Nov 1 00:45:46.964139 env[1736]: time="2025-11-01T00:45:46.964107553Z" level=info msg="StartContainer for \"a524d9edc36addb6bbcd05f45a7683921c6d9378845d0d5b9dd18d37547b38e2\"" Nov 1 00:45:46.984677 systemd[1]: Started cri-containerd-a524d9edc36addb6bbcd05f45a7683921c6d9378845d0d5b9dd18d37547b38e2.scope. Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f5c6559d2f8 items=0 ppid=3247 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:47.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323464396564633336616464623662626364303566343561373638 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit: BPF prog-id=129 op=LOAD Nov 1 00:45:47.012000 audit[3363]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000249a8 items=0 ppid=3247 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:47.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323464396564633336616464623662626364303566343561373638 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit: BPF prog-id=130 op=LOAD Nov 1 00:45:47.012000 audit[3363]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000249f8 items=0 ppid=3247 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:47.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323464396564633336616464623662626364303566343561373638 Nov 1 00:45:47.012000 audit: BPF prog-id=130 op=UNLOAD Nov 1 00:45:47.012000 audit: BPF prog-id=129 op=UNLOAD Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { perfmon } for pid=3363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit[3363]: AVC avc: denied { bpf } for pid=3363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:47.012000 audit: BPF prog-id=131 op=LOAD Nov 1 00:45:47.012000 audit[3363]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000024a88 items=0 ppid=3247 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:47.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323464396564633336616464623662626364303566343561373638 Nov 1 00:45:47.036517 env[1736]: time="2025-11-01T00:45:47.036405653Z" level=info msg="StartContainer for \"a524d9edc36addb6bbcd05f45a7683921c6d9378845d0d5b9dd18d37547b38e2\" returns successfully" Nov 1 00:45:47.051652 systemd[1]: cri-containerd-a524d9edc36addb6bbcd05f45a7683921c6d9378845d0d5b9dd18d37547b38e2.scope: Deactivated successfully. Nov 1 00:45:47.055000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:45:47.112232 env[1736]: time="2025-11-01T00:45:47.110287268Z" level=info msg="shim disconnected" id=a524d9edc36addb6bbcd05f45a7683921c6d9378845d0d5b9dd18d37547b38e2 Nov 1 00:45:47.112232 env[1736]: time="2025-11-01T00:45:47.110332755Z" level=warning msg="cleaning up after shim disconnected" id=a524d9edc36addb6bbcd05f45a7683921c6d9378845d0d5b9dd18d37547b38e2 namespace=k8s.io Nov 1 00:45:47.112232 env[1736]: time="2025-11-01T00:45:47.110342325Z" level=info msg="cleaning up dead shim" Nov 1 00:45:47.119258 env[1736]: time="2025-11-01T00:45:47.119202929Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:45:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3404 runtime=io.containerd.runc.v2\ntime=\"2025-11-01T00:45:47Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Nov 1 00:45:47.667349 kubelet[2626]: E1101 00:45:47.666797 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:45:49.505028 env[1736]: time="2025-11-01T00:45:49.504784789Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:49.507700 env[1736]: time="2025-11-01T00:45:49.507664113Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:49.509639 env[1736]: time="2025-11-01T00:45:49.509605564Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:49.511301 env[1736]: time="2025-11-01T00:45:49.511259190Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:49.511968 env[1736]: time="2025-11-01T00:45:49.511933010Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958\"" Nov 1 00:45:49.521611 env[1736]: time="2025-11-01T00:45:49.521569840Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:45:49.530008 env[1736]: time="2025-11-01T00:45:49.529964618Z" level=info msg="CreateContainer within sandbox \"c02feefe2b00635fe637ae1d85b6b430783e447e7d30169e34c0278f47a51154\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:45:49.551109 env[1736]: time="2025-11-01T00:45:49.548390124Z" level=info msg="CreateContainer within sandbox \"c02feefe2b00635fe637ae1d85b6b430783e447e7d30169e34c0278f47a51154\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"5ca4508c26c2712d40def1ea028db285de4d2b635a9c9db5603b5cea906bbc6c\"" Nov 1 00:45:49.551109 env[1736]: time="2025-11-01T00:45:49.549281476Z" level=info msg="StartContainer for \"5ca4508c26c2712d40def1ea028db285de4d2b635a9c9db5603b5cea906bbc6c\"" Nov 1 00:45:49.579927 systemd[1]: run-containerd-runc-k8s.io-5ca4508c26c2712d40def1ea028db285de4d2b635a9c9db5603b5cea906bbc6c-runc.Y4TDYJ.mount: Deactivated successfully. Nov 1 00:45:49.594346 systemd[1]: Started cri-containerd-5ca4508c26c2712d40def1ea028db285de4d2b635a9c9db5603b5cea906bbc6c.scope. Nov 1 00:45:49.618895 kernel: kauditd_printk_skb: 166 callbacks suppressed Nov 1 00:45:49.619055 kernel: audit: type=1400 audit(1761957949.610:992): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.634575 kernel: audit: type=1400 audit(1761957949.610:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.634722 kernel: audit: type=1400 audit(1761957949.618:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.648084 kernel: audit: type=1400 audit(1761957949.618:995): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.648235 kernel: audit: type=1400 audit(1761957949.618:996): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.655609 kernel: audit: type=1400 audit(1761957949.618:997): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.671040 kernel: audit: type=1400 audit(1761957949.618:998): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.671154 kernel: audit: type=1400 audit(1761957949.618:999): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.671301 kubelet[2626]: E1101 00:45:49.668436 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:45:49.679246 kernel: audit: type=1400 audit(1761957949.618:1000): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.686404 kernel: audit: type=1400 audit(1761957949.618:1001): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.618000 audit: BPF prog-id=132 op=LOAD Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3209 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563613435303863323663323731326434306465663165613032386462 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3209 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563613435303863323663323731326434306465663165613032386462 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit: BPF prog-id=133 op=LOAD Nov 1 00:45:49.619000 audit[3431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025720 items=0 ppid=3209 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563613435303863323663323731326434306465663165613032386462 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.619000 audit: BPF prog-id=134 op=LOAD Nov 1 00:45:49.619000 audit[3431]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025768 items=0 ppid=3209 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:49.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563613435303863323663323731326434306465663165613032386462 Nov 1 00:45:49.620000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:45:49.620000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { perfmon } for pid=3431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit[3431]: AVC avc: denied { bpf } for pid=3431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:49.620000 audit: BPF prog-id=135 op=LOAD Nov 1 00:45:49.620000 audit[3431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025b78 items=0 ppid=3209 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:49.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563613435303863323663323731326434306465663165613032386462 Nov 1 00:45:49.707477 env[1736]: time="2025-11-01T00:45:49.707415649Z" level=info msg="StartContainer for \"5ca4508c26c2712d40def1ea028db285de4d2b635a9c9db5603b5cea906bbc6c\" returns successfully" Nov 1 00:45:49.884532 kubelet[2626]: I1101 00:45:49.884380 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-95665f8d6-fvqnz" podStartSLOduration=2.084151853 podStartE2EDuration="5.884357623s" podCreationTimestamp="2025-11-01 00:45:44 +0000 UTC" firstStartedPulling="2025-11-01 00:45:45.713086898 +0000 UTC m=+24.299069890" lastFinishedPulling="2025-11-01 00:45:49.513292684 +0000 UTC m=+28.099275660" observedRunningTime="2025-11-01 00:45:49.883279657 +0000 UTC m=+28.469262655" watchObservedRunningTime="2025-11-01 00:45:49.884357623 +0000 UTC m=+28.470340619" Nov 1 00:45:50.848597 kubelet[2626]: I1101 00:45:50.848562 2626 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:45:51.668889 kubelet[2626]: E1101 00:45:51.668843 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:45:53.484478 env[1736]: time="2025-11-01T00:45:53.484421544Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:53.486369 env[1736]: time="2025-11-01T00:45:53.486329502Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:53.488053 env[1736]: time="2025-11-01T00:45:53.488015865Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:53.489669 env[1736]: time="2025-11-01T00:45:53.489610354Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:45:53.490445 env[1736]: time="2025-11-01T00:45:53.490393363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd\"" Nov 1 00:45:53.496360 env[1736]: time="2025-11-01T00:45:53.496300499Z" level=info msg="CreateContainer within sandbox \"7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:45:53.512134 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1583233748.mount: Deactivated successfully. Nov 1 00:45:53.518906 env[1736]: time="2025-11-01T00:45:53.518847147Z" level=info msg="CreateContainer within sandbox \"7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe\"" Nov 1 00:45:53.520777 env[1736]: time="2025-11-01T00:45:53.519666899Z" level=info msg="StartContainer for \"3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe\"" Nov 1 00:45:53.552268 systemd[1]: run-containerd-runc-k8s.io-3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe-runc.W45XQe.mount: Deactivated successfully. Nov 1 00:45:53.557999 systemd[1]: Started cri-containerd-3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe.scope. Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f39a032db98 items=0 ppid=3247 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:53.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613665313264383634356637353733306530636261636330373037 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit: BPF prog-id=136 op=LOAD Nov 1 00:45:53.583000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001c1708 items=0 ppid=3247 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:53.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613665313264383634356637353733306530636261636330373037 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit: BPF prog-id=137 op=LOAD Nov 1 00:45:53.583000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001c1758 items=0 ppid=3247 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:53.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613665313264383634356637353733306530636261636330373037 Nov 1 00:45:53.583000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:45:53.583000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:45:53.583000 audit: BPF prog-id=138 op=LOAD Nov 1 00:45:53.583000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001c17e8 items=0 ppid=3247 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:53.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613665313264383634356637353733306530636261636330373037 Nov 1 00:45:53.602447 env[1736]: time="2025-11-01T00:45:53.602395498Z" level=info msg="StartContainer for \"3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe\" returns successfully" Nov 1 00:45:53.668547 kubelet[2626]: E1101 00:45:53.668497 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:45:54.376140 env[1736]: time="2025-11-01T00:45:54.376023968Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:45:54.379295 systemd[1]: cri-containerd-3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe.scope: Deactivated successfully. Nov 1 00:45:54.383000 audit: BPF prog-id=138 op=UNLOAD Nov 1 00:45:54.413175 env[1736]: time="2025-11-01T00:45:54.413129523Z" level=info msg="shim disconnected" id=3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe Nov 1 00:45:54.413175 env[1736]: time="2025-11-01T00:45:54.413173125Z" level=warning msg="cleaning up after shim disconnected" id=3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe namespace=k8s.io Nov 1 00:45:54.413175 env[1736]: time="2025-11-01T00:45:54.413182229Z" level=info msg="cleaning up dead shim" Nov 1 00:45:54.421842 env[1736]: time="2025-11-01T00:45:54.421794872Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:45:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3513 runtime=io.containerd.runc.v2\n" Nov 1 00:45:54.459088 kubelet[2626]: I1101 00:45:54.459047 2626 kubelet_node_status.go:439] "Fast updating node status as it just became ready" Nov 1 00:45:54.514113 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3fa6e12d8645f75730e0cbacc0707258c15a17c89b383848b87b4da175d865fe-rootfs.mount: Deactivated successfully. Nov 1 00:45:54.520896 systemd[1]: Created slice kubepods-besteffort-pod4b1d53a4_89fb_4fe4_988b_0dbbdd4be6fc.slice. Nov 1 00:45:54.533695 systemd[1]: Created slice kubepods-burstable-pod7e26727d_5219_45e0_9b07_a268a5569ad2.slice. Nov 1 00:45:54.539380 systemd[1]: Created slice kubepods-burstable-pod26320c11_fd44_44ad_b136_f0d68f311c28.slice. Nov 1 00:45:54.546219 kubelet[2626]: E1101 00:45:54.546182 2626 reflector.go:205] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"whisker-ca-bundle\" is forbidden: User \"system:node:ip-172-31-16-197\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-16-197' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" Nov 1 00:45:54.547150 kubelet[2626]: E1101 00:45:54.546807 2626 reflector.go:205] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ip-172-31-16-197\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ip-172-31-16-197' and this object" logger="UnhandledError" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" Nov 1 00:45:54.547310 kubelet[2626]: E1101 00:45:54.546880 2626 reflector.go:205] "Failed to watch" err="failed to list *v1.Secret: secrets \"calico-apiserver-certs\" is forbidden: User \"system:node:ip-172-31-16-197\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ip-172-31-16-197' and this object" logger="UnhandledError" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" Nov 1 00:45:54.547403 kubelet[2626]: E1101 00:45:54.546942 2626 reflector.go:205] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"goldmane\" is forbidden: User \"system:node:ip-172-31-16-197\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-16-197' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" Nov 1 00:45:54.547477 kubelet[2626]: E1101 00:45:54.546992 2626 reflector.go:205] "Failed to watch" err="failed to list *v1.Secret: secrets \"goldmane-key-pair\" is forbidden: User \"system:node:ip-172-31-16-197\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-16-197' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" Nov 1 00:45:54.547545 kubelet[2626]: E1101 00:45:54.547034 2626 reflector.go:205] "Failed to watch" err="failed to list *v1.Secret: secrets \"whisker-backend-key-pair\" is forbidden: User \"system:node:ip-172-31-16-197\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-16-197' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" Nov 1 00:45:54.547607 kubelet[2626]: E1101 00:45:54.547085 2626 reflector.go:205] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"goldmane-ca-bundle\" is forbidden: User \"system:node:ip-172-31-16-197\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-16-197' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" Nov 1 00:45:54.553226 systemd[1]: Created slice kubepods-besteffort-pod356f7291_d15f_418b_af8c_74797b886c7a.slice. Nov 1 00:45:54.571449 systemd[1]: Created slice kubepods-besteffort-pod703a5252_c145_457e_b648_c986dff90c0c.slice. Nov 1 00:45:54.592939 systemd[1]: Created slice kubepods-besteffort-podb1382796_d43e_42cf_9f8e_009d999e587c.slice. Nov 1 00:45:54.599573 kubelet[2626]: I1101 00:45:54.599530 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7e26727d-5219-45e0-9b07-a268a5569ad2-config-volume\") pod \"coredns-66bc5c9577-2xnzk\" (UID: \"7e26727d-5219-45e0-9b07-a268a5569ad2\") " pod="kube-system/coredns-66bc5c9577-2xnzk" Nov 1 00:45:54.599788 kubelet[2626]: I1101 00:45:54.599585 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/703a5252-c145-457e-b648-c986dff90c0c-calico-apiserver-certs\") pod \"calico-apiserver-5456df96b8-f9wrw\" (UID: \"703a5252-c145-457e-b648-c986dff90c0c\") " pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" Nov 1 00:45:54.599788 kubelet[2626]: I1101 00:45:54.599614 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c9njk\" (UniqueName: \"kubernetes.io/projected/703a5252-c145-457e-b648-c986dff90c0c-kube-api-access-c9njk\") pod \"calico-apiserver-5456df96b8-f9wrw\" (UID: \"703a5252-c145-457e-b648-c986dff90c0c\") " pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" Nov 1 00:45:54.599788 kubelet[2626]: I1101 00:45:54.599636 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/b1382796-d43e-42cf-9f8e-009d999e587c-goldmane-key-pair\") pod \"goldmane-7c778bb748-5czvc\" (UID: \"b1382796-d43e-42cf-9f8e-009d999e587c\") " pod="calico-system/goldmane-7c778bb748-5czvc" Nov 1 00:45:54.599788 kubelet[2626]: I1101 00:45:54.599666 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/356f7291-d15f-418b-af8c-74797b886c7a-calico-apiserver-certs\") pod \"calico-apiserver-5456df96b8-5zpgr\" (UID: \"356f7291-d15f-418b-af8c-74797b886c7a\") " pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" Nov 1 00:45:54.599788 kubelet[2626]: I1101 00:45:54.599700 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc-tigera-ca-bundle\") pod \"calico-kube-controllers-6c99b8d486-hs4b2\" (UID: \"4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc\") " pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" Nov 1 00:45:54.600050 kubelet[2626]: I1101 00:45:54.599721 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-backend-key-pair\") pod \"whisker-7dc594686b-qh8nt\" (UID: \"6d383461-94cd-4c15-a3e9-fabde0929875\") " pod="calico-system/whisker-7dc594686b-qh8nt" Nov 1 00:45:54.600050 kubelet[2626]: I1101 00:45:54.599774 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/b1382796-d43e-42cf-9f8e-009d999e587c-config\") pod \"goldmane-7c778bb748-5czvc\" (UID: \"b1382796-d43e-42cf-9f8e-009d999e587c\") " pod="calico-system/goldmane-7c778bb748-5czvc" Nov 1 00:45:54.600050 kubelet[2626]: I1101 00:45:54.599802 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tntd6\" (UniqueName: \"kubernetes.io/projected/4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc-kube-api-access-tntd6\") pod \"calico-kube-controllers-6c99b8d486-hs4b2\" (UID: \"4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc\") " pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" Nov 1 00:45:54.600050 kubelet[2626]: I1101 00:45:54.599830 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/26320c11-fd44-44ad-b136-f0d68f311c28-config-volume\") pod \"coredns-66bc5c9577-2mpph\" (UID: \"26320c11-fd44-44ad-b136-f0d68f311c28\") " pod="kube-system/coredns-66bc5c9577-2mpph" Nov 1 00:45:54.600050 kubelet[2626]: I1101 00:45:54.599854 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tsd7j\" (UniqueName: \"kubernetes.io/projected/26320c11-fd44-44ad-b136-f0d68f311c28-kube-api-access-tsd7j\") pod \"coredns-66bc5c9577-2mpph\" (UID: \"26320c11-fd44-44ad-b136-f0d68f311c28\") " pod="kube-system/coredns-66bc5c9577-2mpph" Nov 1 00:45:54.600285 kubelet[2626]: I1101 00:45:54.599877 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dr4t8\" (UniqueName: \"kubernetes.io/projected/7e26727d-5219-45e0-9b07-a268a5569ad2-kube-api-access-dr4t8\") pod \"coredns-66bc5c9577-2xnzk\" (UID: \"7e26727d-5219-45e0-9b07-a268a5569ad2\") " pod="kube-system/coredns-66bc5c9577-2xnzk" Nov 1 00:45:54.600285 kubelet[2626]: I1101 00:45:54.599903 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b1382796-d43e-42cf-9f8e-009d999e587c-goldmane-ca-bundle\") pod \"goldmane-7c778bb748-5czvc\" (UID: \"b1382796-d43e-42cf-9f8e-009d999e587c\") " pod="calico-system/goldmane-7c778bb748-5czvc" Nov 1 00:45:54.600285 kubelet[2626]: I1101 00:45:54.599951 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-ca-bundle\") pod \"whisker-7dc594686b-qh8nt\" (UID: \"6d383461-94cd-4c15-a3e9-fabde0929875\") " pod="calico-system/whisker-7dc594686b-qh8nt" Nov 1 00:45:54.600285 kubelet[2626]: I1101 00:45:54.600009 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lfh7z\" (UniqueName: \"kubernetes.io/projected/356f7291-d15f-418b-af8c-74797b886c7a-kube-api-access-lfh7z\") pod \"calico-apiserver-5456df96b8-5zpgr\" (UID: \"356f7291-d15f-418b-af8c-74797b886c7a\") " pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" Nov 1 00:45:54.600285 kubelet[2626]: I1101 00:45:54.600039 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bwrnl\" (UniqueName: \"kubernetes.io/projected/b1382796-d43e-42cf-9f8e-009d999e587c-kube-api-access-bwrnl\") pod \"goldmane-7c778bb748-5czvc\" (UID: \"b1382796-d43e-42cf-9f8e-009d999e587c\") " pod="calico-system/goldmane-7c778bb748-5czvc" Nov 1 00:45:54.600507 kubelet[2626]: I1101 00:45:54.600073 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fvxq9\" (UniqueName: \"kubernetes.io/projected/6d383461-94cd-4c15-a3e9-fabde0929875-kube-api-access-fvxq9\") pod \"whisker-7dc594686b-qh8nt\" (UID: \"6d383461-94cd-4c15-a3e9-fabde0929875\") " pod="calico-system/whisker-7dc594686b-qh8nt" Nov 1 00:45:54.604355 systemd[1]: Created slice kubepods-besteffort-pod6d383461_94cd_4c15_a3e9_fabde0929875.slice. Nov 1 00:45:54.831163 env[1736]: time="2025-11-01T00:45:54.831119170Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c99b8d486-hs4b2,Uid:4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc,Namespace:calico-system,Attempt:0,}" Nov 1 00:45:54.845119 env[1736]: time="2025-11-01T00:45:54.845079636Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-66bc5c9577-2xnzk,Uid:7e26727d-5219-45e0-9b07-a268a5569ad2,Namespace:kube-system,Attempt:0,}" Nov 1 00:45:54.853027 env[1736]: time="2025-11-01T00:45:54.852981730Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-66bc5c9577-2mpph,Uid:26320c11-fd44-44ad-b136-f0d68f311c28,Namespace:kube-system,Attempt:0,}" Nov 1 00:45:54.865521 env[1736]: time="2025-11-01T00:45:54.863483580Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:45:55.167106 env[1736]: time="2025-11-01T00:45:55.166621733Z" level=error msg="Failed to destroy network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.167304 env[1736]: time="2025-11-01T00:45:55.167251159Z" level=error msg="encountered an error cleaning up failed sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.167400 env[1736]: time="2025-11-01T00:45:55.167329745Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-66bc5c9577-2mpph,Uid:26320c11-fd44-44ad-b136-f0d68f311c28,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.167972 kubelet[2626]: E1101 00:45:55.167588 2626 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.167972 kubelet[2626]: E1101 00:45:55.167678 2626 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-66bc5c9577-2mpph" Nov 1 00:45:55.167972 kubelet[2626]: E1101 00:45:55.167708 2626 kuberuntime_manager.go:1343] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-66bc5c9577-2mpph" Nov 1 00:45:55.170056 kubelet[2626]: E1101 00:45:55.167923 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-66bc5c9577-2mpph_kube-system(26320c11-fd44-44ad-b136-f0d68f311c28)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-66bc5c9577-2mpph_kube-system(26320c11-fd44-44ad-b136-f0d68f311c28)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-66bc5c9577-2mpph" podUID="26320c11-fd44-44ad-b136-f0d68f311c28" Nov 1 00:45:55.182839 env[1736]: time="2025-11-01T00:45:55.182775717Z" level=error msg="Failed to destroy network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.183137 env[1736]: time="2025-11-01T00:45:55.182840944Z" level=error msg="Failed to destroy network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.183509 env[1736]: time="2025-11-01T00:45:55.183470287Z" level=error msg="encountered an error cleaning up failed sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.183600 env[1736]: time="2025-11-01T00:45:55.183542876Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-66bc5c9577-2xnzk,Uid:7e26727d-5219-45e0-9b07-a268a5569ad2,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.183680 env[1736]: time="2025-11-01T00:45:55.183489125Z" level=error msg="encountered an error cleaning up failed sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.183929 kubelet[2626]: E1101 00:45:55.183887 2626 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.184552 kubelet[2626]: E1101 00:45:55.183953 2626 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-66bc5c9577-2xnzk" Nov 1 00:45:55.184552 kubelet[2626]: E1101 00:45:55.183980 2626 kuberuntime_manager.go:1343] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-66bc5c9577-2xnzk" Nov 1 00:45:55.184552 kubelet[2626]: E1101 00:45:55.184055 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-66bc5c9577-2xnzk_kube-system(7e26727d-5219-45e0-9b07-a268a5569ad2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-66bc5c9577-2xnzk_kube-system(7e26727d-5219-45e0-9b07-a268a5569ad2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-66bc5c9577-2xnzk" podUID="7e26727d-5219-45e0-9b07-a268a5569ad2" Nov 1 00:45:55.184917 env[1736]: time="2025-11-01T00:45:55.184072656Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c99b8d486-hs4b2,Uid:4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.185634 kubelet[2626]: E1101 00:45:55.185339 2626 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.185634 kubelet[2626]: E1101 00:45:55.185414 2626 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" Nov 1 00:45:55.185634 kubelet[2626]: E1101 00:45:55.185455 2626 kuberuntime_manager.go:1343] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" Nov 1 00:45:55.186826 kubelet[2626]: E1101 00:45:55.185540 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6c99b8d486-hs4b2_calico-system(4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6c99b8d486-hs4b2_calico-system(4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:45:55.671639 systemd[1]: Created slice kubepods-besteffort-poda9ee1226_e5f0_4660_960b_3308581cda89.slice. Nov 1 00:45:55.676995 env[1736]: time="2025-11-01T00:45:55.676942414Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k2xb7,Uid:a9ee1226-e5f0-4660-960b-3308581cda89,Namespace:calico-system,Attempt:0,}" Nov 1 00:45:55.702555 kubelet[2626]: E1101 00:45:55.702507 2626 configmap.go:193] Couldn't get configMap calico-system/goldmane: failed to sync configmap cache: timed out waiting for the condition Nov 1 00:45:55.706961 kubelet[2626]: E1101 00:45:55.706929 2626 configmap.go:193] Couldn't get configMap calico-system/goldmane-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Nov 1 00:45:55.707113 kubelet[2626]: E1101 00:45:55.707104 2626 secret.go:189] Couldn't get secret calico-system/whisker-backend-key-pair: failed to sync secret cache: timed out waiting for the condition Nov 1 00:45:55.708234 kubelet[2626]: E1101 00:45:55.707871 2626 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/b1382796-d43e-42cf-9f8e-009d999e587c-config podName:b1382796-d43e-42cf-9f8e-009d999e587c nodeName:}" failed. No retries permitted until 2025-11-01 00:45:56.204795846 +0000 UTC m=+34.790778903 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config" (UniqueName: "kubernetes.io/configmap/b1382796-d43e-42cf-9f8e-009d999e587c-config") pod "goldmane-7c778bb748-5czvc" (UID: "b1382796-d43e-42cf-9f8e-009d999e587c") : failed to sync configmap cache: timed out waiting for the condition Nov 1 00:45:55.708234 kubelet[2626]: E1101 00:45:55.707931 2626 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/b1382796-d43e-42cf-9f8e-009d999e587c-goldmane-ca-bundle podName:b1382796-d43e-42cf-9f8e-009d999e587c nodeName:}" failed. No retries permitted until 2025-11-01 00:45:56.207921847 +0000 UTC m=+34.793904820 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "goldmane-ca-bundle" (UniqueName: "kubernetes.io/configmap/b1382796-d43e-42cf-9f8e-009d999e587c-goldmane-ca-bundle") pod "goldmane-7c778bb748-5czvc" (UID: "b1382796-d43e-42cf-9f8e-009d999e587c") : failed to sync configmap cache: timed out waiting for the condition Nov 1 00:45:55.708234 kubelet[2626]: E1101 00:45:55.707951 2626 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-backend-key-pair podName:6d383461-94cd-4c15-a3e9-fabde0929875 nodeName:}" failed. No retries permitted until 2025-11-01 00:45:56.207941276 +0000 UTC m=+34.793924249 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "whisker-backend-key-pair" (UniqueName: "kubernetes.io/secret/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-backend-key-pair") pod "whisker-7dc594686b-qh8nt" (UID: "6d383461-94cd-4c15-a3e9-fabde0929875") : failed to sync secret cache: timed out waiting for the condition Nov 1 00:45:55.759712 env[1736]: time="2025-11-01T00:45:55.759640841Z" level=error msg="Failed to destroy network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.760231 env[1736]: time="2025-11-01T00:45:55.760180229Z" level=error msg="encountered an error cleaning up failed sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.760328 env[1736]: time="2025-11-01T00:45:55.760254716Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k2xb7,Uid:a9ee1226-e5f0-4660-960b-3308581cda89,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.760554 kubelet[2626]: E1101 00:45:55.760519 2626 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.760656 kubelet[2626]: E1101 00:45:55.760580 2626 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-k2xb7" Nov 1 00:45:55.760656 kubelet[2626]: E1101 00:45:55.760604 2626 kuberuntime_manager.go:1343] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-k2xb7" Nov 1 00:45:55.760789 kubelet[2626]: E1101 00:45:55.760675 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:45:55.771553 env[1736]: time="2025-11-01T00:45:55.771512905Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5456df96b8-5zpgr,Uid:356f7291-d15f-418b-af8c-74797b886c7a,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:45:55.784153 env[1736]: time="2025-11-01T00:45:55.784108526Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5456df96b8-f9wrw,Uid:703a5252-c145-457e-b648-c986dff90c0c,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:45:55.867324 kubelet[2626]: I1101 00:45:55.867294 2626 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:45:55.870378 kubelet[2626]: I1101 00:45:55.870343 2626 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:45:55.874715 kubelet[2626]: I1101 00:45:55.874609 2626 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:45:55.875391 env[1736]: time="2025-11-01T00:45:55.875358867Z" level=info msg="StopPodSandbox for \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\"" Nov 1 00:45:55.876905 env[1736]: time="2025-11-01T00:45:55.876871800Z" level=info msg="StopPodSandbox for \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\"" Nov 1 00:45:55.877321 env[1736]: time="2025-11-01T00:45:55.877301358Z" level=info msg="StopPodSandbox for \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\"" Nov 1 00:45:55.878960 kubelet[2626]: I1101 00:45:55.878506 2626 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:45:55.879337 env[1736]: time="2025-11-01T00:45:55.879310167Z" level=info msg="StopPodSandbox for \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\"" Nov 1 00:45:55.912296 env[1736]: time="2025-11-01T00:45:55.912238630Z" level=error msg="Failed to destroy network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.913094 env[1736]: time="2025-11-01T00:45:55.913056573Z" level=error msg="encountered an error cleaning up failed sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.913228 env[1736]: time="2025-11-01T00:45:55.913204919Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5456df96b8-5zpgr,Uid:356f7291-d15f-418b-af8c-74797b886c7a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.914490 kubelet[2626]: E1101 00:45:55.913607 2626 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.914490 kubelet[2626]: E1101 00:45:55.913649 2626 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" Nov 1 00:45:55.914490 kubelet[2626]: E1101 00:45:55.913672 2626 kuberuntime_manager.go:1343] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" Nov 1 00:45:55.915456 kubelet[2626]: E1101 00:45:55.913715 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5456df96b8-5zpgr_calico-apiserver(356f7291-d15f-418b-af8c-74797b886c7a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5456df96b8-5zpgr_calico-apiserver(356f7291-d15f-418b-af8c-74797b886c7a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:45:55.921807 env[1736]: time="2025-11-01T00:45:55.921719003Z" level=error msg="Failed to destroy network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.922292 env[1736]: time="2025-11-01T00:45:55.922220553Z" level=error msg="encountered an error cleaning up failed sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.922428 env[1736]: time="2025-11-01T00:45:55.922402621Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5456df96b8-f9wrw,Uid:703a5252-c145-457e-b648-c986dff90c0c,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.926145 kubelet[2626]: E1101 00:45:55.925505 2626 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.926145 kubelet[2626]: E1101 00:45:55.925548 2626 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" Nov 1 00:45:55.926145 kubelet[2626]: E1101 00:45:55.925580 2626 kuberuntime_manager.go:1343] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" Nov 1 00:45:55.926337 kubelet[2626]: E1101 00:45:55.925623 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5456df96b8-f9wrw_calico-apiserver(703a5252-c145-457e-b648-c986dff90c0c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5456df96b8-f9wrw_calico-apiserver(703a5252-c145-457e-b648-c986dff90c0c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:45:55.969518 env[1736]: time="2025-11-01T00:45:55.969465481Z" level=error msg="StopPodSandbox for \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\" failed" error="failed to destroy network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.969911 kubelet[2626]: E1101 00:45:55.969717 2626 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:45:55.969911 kubelet[2626]: E1101 00:45:55.969789 2626 kuberuntime_manager.go:1665] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c"} Nov 1 00:45:55.969911 kubelet[2626]: E1101 00:45:55.969841 2626 kuberuntime_manager.go:1233] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:45:55.969911 kubelet[2626]: E1101 00:45:55.969882 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:45:55.970824 env[1736]: time="2025-11-01T00:45:55.970732259Z" level=error msg="StopPodSandbox for \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\" failed" error="failed to destroy network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.971054 kubelet[2626]: E1101 00:45:55.971027 2626 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:45:55.971124 kubelet[2626]: E1101 00:45:55.971081 2626 kuberuntime_manager.go:1665] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a"} Nov 1 00:45:55.971124 kubelet[2626]: E1101 00:45:55.971113 2626 kuberuntime_manager.go:1233] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7e26727d-5219-45e0-9b07-a268a5569ad2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:45:55.971297 kubelet[2626]: E1101 00:45:55.971136 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7e26727d-5219-45e0-9b07-a268a5569ad2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-66bc5c9577-2xnzk" podUID="7e26727d-5219-45e0-9b07-a268a5569ad2" Nov 1 00:45:55.984060 env[1736]: time="2025-11-01T00:45:55.984004654Z" level=error msg="StopPodSandbox for \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\" failed" error="failed to destroy network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.984365 kubelet[2626]: E1101 00:45:55.984319 2626 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:45:55.984497 kubelet[2626]: E1101 00:45:55.984372 2626 kuberuntime_manager.go:1665] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959"} Nov 1 00:45:55.984497 kubelet[2626]: E1101 00:45:55.984401 2626 kuberuntime_manager.go:1233] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"26320c11-fd44-44ad-b136-f0d68f311c28\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:45:55.984497 kubelet[2626]: E1101 00:45:55.984437 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"26320c11-fd44-44ad-b136-f0d68f311c28\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-66bc5c9577-2mpph" podUID="26320c11-fd44-44ad-b136-f0d68f311c28" Nov 1 00:45:55.992193 env[1736]: time="2025-11-01T00:45:55.992131984Z" level=error msg="StopPodSandbox for \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\" failed" error="failed to destroy network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:55.992393 kubelet[2626]: E1101 00:45:55.992361 2626 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:45:55.992482 kubelet[2626]: E1101 00:45:55.992402 2626 kuberuntime_manager.go:1665] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df"} Nov 1 00:45:55.992482 kubelet[2626]: E1101 00:45:55.992435 2626 kuberuntime_manager.go:1233] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a9ee1226-e5f0-4660-960b-3308581cda89\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:45:55.992482 kubelet[2626]: E1101 00:45:55.992461 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a9ee1226-e5f0-4660-960b-3308581cda89\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:45:56.405902 env[1736]: time="2025-11-01T00:45:56.405849553Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7c778bb748-5czvc,Uid:b1382796-d43e-42cf-9f8e-009d999e587c,Namespace:calico-system,Attempt:0,}" Nov 1 00:45:56.412019 env[1736]: time="2025-11-01T00:45:56.411972467Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7dc594686b-qh8nt,Uid:6d383461-94cd-4c15-a3e9-fabde0929875,Namespace:calico-system,Attempt:0,}" Nov 1 00:45:56.517982 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df-shm.mount: Deactivated successfully. Nov 1 00:45:56.570367 env[1736]: time="2025-11-01T00:45:56.570307565Z" level=error msg="Failed to destroy network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.577073 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb-shm.mount: Deactivated successfully. Nov 1 00:45:56.580318 env[1736]: time="2025-11-01T00:45:56.580231926Z" level=error msg="encountered an error cleaning up failed sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.580580 env[1736]: time="2025-11-01T00:45:56.580531409Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7dc594686b-qh8nt,Uid:6d383461-94cd-4c15-a3e9-fabde0929875,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.581095 kubelet[2626]: E1101 00:45:56.581052 2626 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.582348 kubelet[2626]: E1101 00:45:56.581141 2626 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7dc594686b-qh8nt" Nov 1 00:45:56.582348 kubelet[2626]: E1101 00:45:56.581171 2626 kuberuntime_manager.go:1343] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7dc594686b-qh8nt" Nov 1 00:45:56.582348 kubelet[2626]: E1101 00:45:56.581257 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7dc594686b-qh8nt_calico-system(6d383461-94cd-4c15-a3e9-fabde0929875)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7dc594686b-qh8nt_calico-system(6d383461-94cd-4c15-a3e9-fabde0929875)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7dc594686b-qh8nt" podUID="6d383461-94cd-4c15-a3e9-fabde0929875" Nov 1 00:45:56.589016 env[1736]: time="2025-11-01T00:45:56.588957074Z" level=error msg="Failed to destroy network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.596438 env[1736]: time="2025-11-01T00:45:56.594214639Z" level=error msg="encountered an error cleaning up failed sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.596438 env[1736]: time="2025-11-01T00:45:56.594308404Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7c778bb748-5czvc,Uid:b1382796-d43e-42cf-9f8e-009d999e587c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.595490 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa-shm.mount: Deactivated successfully. Nov 1 00:45:56.597179 kubelet[2626]: E1101 00:45:56.594633 2626 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.597179 kubelet[2626]: E1101 00:45:56.594713 2626 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7c778bb748-5czvc" Nov 1 00:45:56.597179 kubelet[2626]: E1101 00:45:56.594742 2626 kuberuntime_manager.go:1343] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7c778bb748-5czvc" Nov 1 00:45:56.597628 kubelet[2626]: E1101 00:45:56.594867 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-7c778bb748-5czvc_calico-system(b1382796-d43e-42cf-9f8e-009d999e587c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-7c778bb748-5czvc_calico-system(b1382796-d43e-42cf-9f8e-009d999e587c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:45:56.882447 kubelet[2626]: I1101 00:45:56.882413 2626 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:45:56.886137 env[1736]: time="2025-11-01T00:45:56.885946697Z" level=info msg="StopPodSandbox for \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\"" Nov 1 00:45:56.893938 kubelet[2626]: I1101 00:45:56.891450 2626 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:45:56.896102 env[1736]: time="2025-11-01T00:45:56.895948688Z" level=info msg="StopPodSandbox for \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\"" Nov 1 00:45:56.901158 kubelet[2626]: I1101 00:45:56.900405 2626 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:45:56.902156 env[1736]: time="2025-11-01T00:45:56.902071134Z" level=info msg="StopPodSandbox for \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\"" Nov 1 00:45:56.928775 kubelet[2626]: I1101 00:45:56.928724 2626 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:45:56.945734 env[1736]: time="2025-11-01T00:45:56.945682440Z" level=info msg="StopPodSandbox for \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\"" Nov 1 00:45:56.983528 env[1736]: time="2025-11-01T00:45:56.983464794Z" level=error msg="StopPodSandbox for \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\" failed" error="failed to destroy network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:56.984230 kubelet[2626]: E1101 00:45:56.984037 2626 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:45:56.984230 kubelet[2626]: E1101 00:45:56.984093 2626 kuberuntime_manager.go:1665] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb"} Nov 1 00:45:56.984230 kubelet[2626]: E1101 00:45:56.984141 2626 kuberuntime_manager.go:1233] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6d383461-94cd-4c15-a3e9-fabde0929875\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:45:56.984230 kubelet[2626]: E1101 00:45:56.984181 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6d383461-94cd-4c15-a3e9-fabde0929875\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7dc594686b-qh8nt" podUID="6d383461-94cd-4c15-a3e9-fabde0929875" Nov 1 00:45:57.040931 env[1736]: time="2025-11-01T00:45:57.040866605Z" level=error msg="StopPodSandbox for \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\" failed" error="failed to destroy network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:57.041447 kubelet[2626]: E1101 00:45:57.041394 2626 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:45:57.041577 kubelet[2626]: E1101 00:45:57.041455 2626 kuberuntime_manager.go:1665] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6"} Nov 1 00:45:57.041577 kubelet[2626]: E1101 00:45:57.041498 2626 kuberuntime_manager.go:1233] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"703a5252-c145-457e-b648-c986dff90c0c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:45:57.041577 kubelet[2626]: E1101 00:45:57.041538 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"703a5252-c145-457e-b648-c986dff90c0c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:45:57.064380 env[1736]: time="2025-11-01T00:45:57.064316301Z" level=error msg="StopPodSandbox for \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\" failed" error="failed to destroy network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:57.065198 kubelet[2626]: E1101 00:45:57.065119 2626 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:45:57.065198 kubelet[2626]: E1101 00:45:57.065186 2626 kuberuntime_manager.go:1665] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad"} Nov 1 00:45:57.065397 kubelet[2626]: E1101 00:45:57.065226 2626 kuberuntime_manager.go:1233] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"356f7291-d15f-418b-af8c-74797b886c7a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:45:57.065397 kubelet[2626]: E1101 00:45:57.065263 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"356f7291-d15f-418b-af8c-74797b886c7a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:45:57.077395 env[1736]: time="2025-11-01T00:45:57.077331312Z" level=error msg="StopPodSandbox for \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\" failed" error="failed to destroy network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:45:57.077616 kubelet[2626]: E1101 00:45:57.077585 2626 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:45:57.077741 kubelet[2626]: E1101 00:45:57.077637 2626 kuberuntime_manager.go:1665] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa"} Nov 1 00:45:57.077741 kubelet[2626]: E1101 00:45:57.077681 2626 kuberuntime_manager.go:1233] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b1382796-d43e-42cf-9f8e-009d999e587c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:45:57.077741 kubelet[2626]: E1101 00:45:57.077717 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b1382796-d43e-42cf-9f8e-009d999e587c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:45:59.616485 kubelet[2626]: I1101 00:45:59.608223 2626 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:46:00.005111 kernel: kauditd_printk_skb: 91 callbacks suppressed Nov 1 00:46:00.006285 kernel: audit: type=1325 audit(1761957959.995:1017): table=filter:101 family=2 entries=21 op=nft_register_rule pid=3892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:59.995000 audit[3892]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=3892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:45:59.995000 audit[3892]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc1f61f020 a2=0 a3=7ffc1f61f00c items=0 ppid=2914 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:00.025065 kernel: audit: type=1300 audit(1761957959.995:1017): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc1f61f020 a2=0 a3=7ffc1f61f00c items=0 ppid=2914 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:59.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:00.035857 kernel: audit: type=1327 audit(1761957959.995:1017): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:00.042087 kernel: audit: type=1325 audit(1761957960.023:1018): table=nat:102 family=2 entries=19 op=nft_register_chain pid=3892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:00.023000 audit[3892]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=3892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:00.023000 audit[3892]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc1f61f020 a2=0 a3=7ffc1f61f00c items=0 ppid=2914 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:00.054075 kernel: audit: type=1300 audit(1761957960.023:1018): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc1f61f020 a2=0 a3=7ffc1f61f00c items=0 ppid=2914 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:00.055082 kernel: audit: type=1327 audit(1761957960.023:1018): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:00.023000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:04.634650 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount803408468.mount: Deactivated successfully. Nov 1 00:46:04.711999 env[1736]: time="2025-11-01T00:46:04.711627618Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:46:04.714384 env[1736]: time="2025-11-01T00:46:04.714315606Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:46:04.716917 env[1736]: time="2025-11-01T00:46:04.716875849Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:46:04.718379 env[1736]: time="2025-11-01T00:46:04.718344372Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:46:04.719068 env[1736]: time="2025-11-01T00:46:04.718808453Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9\"" Nov 1 00:46:04.764574 env[1736]: time="2025-11-01T00:46:04.764528724Z" level=info msg="CreateContainer within sandbox \"7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:46:04.856011 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2547037884.mount: Deactivated successfully. Nov 1 00:46:04.862479 env[1736]: time="2025-11-01T00:46:04.862425694Z" level=info msg="CreateContainer within sandbox \"7561dadf7ad6feea0f1bfa0b61554e8622cd4eb4dfa024e609e99c52378903cf\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"23ad7c13f4723ce1296a0afe11da2a0cc68ac3566550bb4a360a97281e69d709\"" Nov 1 00:46:04.864647 env[1736]: time="2025-11-01T00:46:04.863272950Z" level=info msg="StartContainer for \"23ad7c13f4723ce1296a0afe11da2a0cc68ac3566550bb4a360a97281e69d709\"" Nov 1 00:46:04.885637 systemd[1]: Started cri-containerd-23ad7c13f4723ce1296a0afe11da2a0cc68ac3566550bb4a360a97281e69d709.scope. Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.945193 kernel: audit: type=1400 audit(1761957964.919:1019): avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.945311 kernel: audit: type=1300 audit(1761957964.919:1019): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fe00725b088 items=0 ppid=3247 pid=3902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:04.952314 kernel: audit: type=1327 audit(1761957964.919:1019): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233616437633133663437323363653132393661306166653131646132 Nov 1 00:46:04.952552 kernel: audit: type=1400 audit(1761957964.919:1020): avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fe00725b088 items=0 ppid=3247 pid=3902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:04.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233616437633133663437323363653132393661306166653131646132 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.919000 audit: BPF prog-id=139 op=LOAD Nov 1 00:46:04.919000 audit[3902]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000fe978 items=0 ppid=3247 pid=3902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:04.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233616437633133663437323363653132393661306166653131646132 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit: BPF prog-id=140 op=LOAD Nov 1 00:46:04.926000 audit[3902]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000fe9c8 items=0 ppid=3247 pid=3902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:04.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233616437633133663437323363653132393661306166653131646132 Nov 1 00:46:04.926000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:46:04.926000 audit: BPF prog-id=139 op=UNLOAD Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit[3902]: AVC avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:04.926000 audit: BPF prog-id=141 op=LOAD Nov 1 00:46:04.926000 audit[3902]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000fea58 items=0 ppid=3247 pid=3902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:04.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233616437633133663437323363653132393661306166653131646132 Nov 1 00:46:04.971006 env[1736]: time="2025-11-01T00:46:04.970905339Z" level=info msg="StartContainer for \"23ad7c13f4723ce1296a0afe11da2a0cc68ac3566550bb4a360a97281e69d709\" returns successfully" Nov 1 00:46:05.662669 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:46:05.663009 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:46:06.028692 systemd[1]: run-containerd-runc-k8s.io-23ad7c13f4723ce1296a0afe11da2a0cc68ac3566550bb4a360a97281e69d709-runc.X6VMNT.mount: Deactivated successfully. Nov 1 00:46:06.043376 kubelet[2626]: I1101 00:46:06.040276 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-hkx7p" podStartSLOduration=1.943717361 podStartE2EDuration="21.034571727s" podCreationTimestamp="2025-11-01 00:45:45 +0000 UTC" firstStartedPulling="2025-11-01 00:45:45.629324148 +0000 UTC m=+24.215307125" lastFinishedPulling="2025-11-01 00:46:04.720178503 +0000 UTC m=+43.306161491" observedRunningTime="2025-11-01 00:46:05.017634037 +0000 UTC m=+43.603617034" watchObservedRunningTime="2025-11-01 00:46:06.034571727 +0000 UTC m=+44.620554724" Nov 1 00:46:06.046555 env[1736]: time="2025-11-01T00:46:06.046515100Z" level=info msg="StopPodSandbox for \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\"" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.199 [INFO][3988] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.233 [INFO][3988] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" iface="eth0" netns="/var/run/netns/cni-333cab16-7657-db2f-aa4b-06c900c3dfc3" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.233 [INFO][3988] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" iface="eth0" netns="/var/run/netns/cni-333cab16-7657-db2f-aa4b-06c900c3dfc3" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.234 [INFO][3988] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" iface="eth0" netns="/var/run/netns/cni-333cab16-7657-db2f-aa4b-06c900c3dfc3" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.234 [INFO][3988] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.234 [INFO][3988] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.585 [INFO][4004] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.588 [INFO][4004] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.589 [INFO][4004] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.602 [WARNING][4004] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.602 [INFO][4004] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.604 [INFO][4004] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:06.609976 env[1736]: 2025-11-01 00:46:06.606 [INFO][3988] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:06.617251 env[1736]: time="2025-11-01T00:46:06.614721765Z" level=info msg="TearDown network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\" successfully" Nov 1 00:46:06.617251 env[1736]: time="2025-11-01T00:46:06.614799617Z" level=info msg="StopPodSandbox for \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\" returns successfully" Nov 1 00:46:06.613606 systemd[1]: run-netns-cni\x2d333cab16\x2d7657\x2ddb2f\x2daa4b\x2d06c900c3dfc3.mount: Deactivated successfully. Nov 1 00:46:06.668965 env[1736]: time="2025-11-01T00:46:06.668913470Z" level=info msg="StopPodSandbox for \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\"" Nov 1 00:46:06.684506 kubelet[2626]: I1101 00:46:06.684359 2626 reconciler_common.go:163] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-backend-key-pair\") pod \"6d383461-94cd-4c15-a3e9-fabde0929875\" (UID: \"6d383461-94cd-4c15-a3e9-fabde0929875\") " Nov 1 00:46:06.684733 kubelet[2626]: I1101 00:46:06.684560 2626 reconciler_common.go:163] "operationExecutor.UnmountVolume started for volume \"kube-api-access-fvxq9\" (UniqueName: \"kubernetes.io/projected/6d383461-94cd-4c15-a3e9-fabde0929875-kube-api-access-fvxq9\") pod \"6d383461-94cd-4c15-a3e9-fabde0929875\" (UID: \"6d383461-94cd-4c15-a3e9-fabde0929875\") " Nov 1 00:46:06.684733 kubelet[2626]: I1101 00:46:06.684592 2626 reconciler_common.go:163] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-ca-bundle\") pod \"6d383461-94cd-4c15-a3e9-fabde0929875\" (UID: \"6d383461-94cd-4c15-a3e9-fabde0929875\") " Nov 1 00:46:06.692672 kubelet[2626]: I1101 00:46:06.689161 2626 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "6d383461-94cd-4c15-a3e9-fabde0929875" (UID: "6d383461-94cd-4c15-a3e9-fabde0929875"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:46:06.697387 systemd[1]: var-lib-kubelet-pods-6d383461\x2d94cd\x2d4c15\x2da3e9\x2dfabde0929875-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:46:06.703065 systemd[1]: var-lib-kubelet-pods-6d383461\x2d94cd\x2d4c15\x2da3e9\x2dfabde0929875-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dfvxq9.mount: Deactivated successfully. Nov 1 00:46:06.704901 kubelet[2626]: I1101 00:46:06.704731 2626 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "6d383461-94cd-4c15-a3e9-fabde0929875" (UID: "6d383461-94cd-4c15-a3e9-fabde0929875"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:46:06.705447 kubelet[2626]: I1101 00:46:06.705414 2626 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6d383461-94cd-4c15-a3e9-fabde0929875-kube-api-access-fvxq9" (OuterVolumeSpecName: "kube-api-access-fvxq9") pod "6d383461-94cd-4c15-a3e9-fabde0929875" (UID: "6d383461-94cd-4c15-a3e9-fabde0929875"). InnerVolumeSpecName "kube-api-access-fvxq9". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:46:06.786337 kubelet[2626]: I1101 00:46:06.786030 2626 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-fvxq9\" (UniqueName: \"kubernetes.io/projected/6d383461-94cd-4c15-a3e9-fabde0929875-kube-api-access-fvxq9\") on node \"ip-172-31-16-197\" DevicePath \"\"" Nov 1 00:46:06.786337 kubelet[2626]: I1101 00:46:06.786065 2626 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-ca-bundle\") on node \"ip-172-31-16-197\" DevicePath \"\"" Nov 1 00:46:06.786337 kubelet[2626]: I1101 00:46:06.786083 2626 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/6d383461-94cd-4c15-a3e9-fabde0929875-whisker-backend-key-pair\") on node \"ip-172-31-16-197\" DevicePath \"\"" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.744 [INFO][4030] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.745 [INFO][4030] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" iface="eth0" netns="/var/run/netns/cni-c46a5e68-ac96-c53a-af22-e55eae87e8d8" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.745 [INFO][4030] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" iface="eth0" netns="/var/run/netns/cni-c46a5e68-ac96-c53a-af22-e55eae87e8d8" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.746 [INFO][4030] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" iface="eth0" netns="/var/run/netns/cni-c46a5e68-ac96-c53a-af22-e55eae87e8d8" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.746 [INFO][4030] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.746 [INFO][4030] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.772 [INFO][4040] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.772 [INFO][4040] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.772 [INFO][4040] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.786 [WARNING][4040] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.786 [INFO][4040] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.789 [INFO][4040] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:06.798215 env[1736]: 2025-11-01 00:46:06.792 [INFO][4030] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:06.801990 env[1736]: time="2025-11-01T00:46:06.801934251Z" level=info msg="TearDown network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\" successfully" Nov 1 00:46:06.802124 env[1736]: time="2025-11-01T00:46:06.802102638Z" level=info msg="StopPodSandbox for \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\" returns successfully" Nov 1 00:46:06.803653 systemd[1]: run-netns-cni\x2dc46a5e68\x2dac96\x2dc53a\x2daf22\x2de55eae87e8d8.mount: Deactivated successfully. Nov 1 00:46:06.809762 env[1736]: time="2025-11-01T00:46:06.809640823Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c99b8d486-hs4b2,Uid:4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc,Namespace:calico-system,Attempt:1,}" Nov 1 00:46:06.988486 (udev-worker)[3955]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:46:06.999081 systemd[1]: Removed slice kubepods-besteffort-pod6d383461_94cd_4c15_a3e9_fabde0929875.slice. Nov 1 00:46:07.008299 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:46:07.008409 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif600e4653cb: link becomes ready Nov 1 00:46:07.014355 systemd-networkd[1460]: calif600e4653cb: Link UP Nov 1 00:46:07.016560 systemd-networkd[1460]: calif600e4653cb: Gained carrier Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.863 [INFO][4046] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.877 [INFO][4046] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0 calico-kube-controllers-6c99b8d486- calico-system 4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc 893 0 2025-11-01 00:45:45 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6c99b8d486 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-16-197 calico-kube-controllers-6c99b8d486-hs4b2 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calif600e4653cb [] [] }} ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Namespace="calico-system" Pod="calico-kube-controllers-6c99b8d486-hs4b2" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.878 [INFO][4046] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Namespace="calico-system" Pod="calico-kube-controllers-6c99b8d486-hs4b2" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.914 [INFO][4058] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" HandleID="k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.914 [INFO][4058] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" HandleID="k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d50d0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-16-197", "pod":"calico-kube-controllers-6c99b8d486-hs4b2", "timestamp":"2025-11-01 00:46:06.914445877 +0000 UTC"}, Hostname:"ip-172-31-16-197", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.914 [INFO][4058] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.914 [INFO][4058] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.914 [INFO][4058] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-197' Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.929 [INFO][4058] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.946 [INFO][4058] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.952 [INFO][4058] ipam/ipam.go 511: Trying affinity for 192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.954 [INFO][4058] ipam/ipam.go 158: Attempting to load block cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.957 [INFO][4058] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.957 [INFO][4058] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.71.192/26 handle="k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.958 [INFO][4058] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.964 [INFO][4058] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.71.192/26 handle="k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.971 [INFO][4058] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.71.193/26] block=192.168.71.192/26 handle="k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.971 [INFO][4058] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.71.193/26] handle="k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" host="ip-172-31-16-197" Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.971 [INFO][4058] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:07.061768 env[1736]: 2025-11-01 00:46:06.971 [INFO][4058] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.71.193/26] IPv6=[] ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" HandleID="k8s-pod-network.f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:07.065825 env[1736]: 2025-11-01 00:46:06.973 [INFO][4046] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Namespace="calico-system" Pod="calico-kube-controllers-6c99b8d486-hs4b2" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0", GenerateName:"calico-kube-controllers-6c99b8d486-", Namespace:"calico-system", SelfLink:"", UID:"4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc", ResourceVersion:"893", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c99b8d486", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"", Pod:"calico-kube-controllers-6c99b8d486-hs4b2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.71.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif600e4653cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:07.065825 env[1736]: 2025-11-01 00:46:06.974 [INFO][4046] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.71.193/32] ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Namespace="calico-system" Pod="calico-kube-controllers-6c99b8d486-hs4b2" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:07.065825 env[1736]: 2025-11-01 00:46:06.974 [INFO][4046] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif600e4653cb ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Namespace="calico-system" Pod="calico-kube-controllers-6c99b8d486-hs4b2" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:07.065825 env[1736]: 2025-11-01 00:46:07.020 [INFO][4046] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Namespace="calico-system" Pod="calico-kube-controllers-6c99b8d486-hs4b2" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:07.065825 env[1736]: 2025-11-01 00:46:07.020 [INFO][4046] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Namespace="calico-system" Pod="calico-kube-controllers-6c99b8d486-hs4b2" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0", GenerateName:"calico-kube-controllers-6c99b8d486-", Namespace:"calico-system", SelfLink:"", UID:"4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc", ResourceVersion:"893", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c99b8d486", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e", Pod:"calico-kube-controllers-6c99b8d486-hs4b2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.71.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif600e4653cb", MAC:"da:6b:e3:29:6d:19", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:07.065825 env[1736]: 2025-11-01 00:46:07.059 [INFO][4046] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e" Namespace="calico-system" Pod="calico-kube-controllers-6c99b8d486-hs4b2" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:07.095038 env[1736]: time="2025-11-01T00:46:07.094938333Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:46:07.095235 env[1736]: time="2025-11-01T00:46:07.095026711Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:46:07.095235 env[1736]: time="2025-11-01T00:46:07.095045397Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:46:07.095600 env[1736]: time="2025-11-01T00:46:07.095541891Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e pid=4094 runtime=io.containerd.runc.v2 Nov 1 00:46:07.129992 systemd[1]: Started cri-containerd-f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e.scope. Nov 1 00:46:07.176169 systemd[1]: Created slice kubepods-besteffort-podda0b54df_6c7c_4295_a916_3e7023bdb682.slice. Nov 1 00:46:07.232196 kernel: kauditd_printk_skb: 39 callbacks suppressed Nov 1 00:46:07.232368 kernel: audit: type=1400 audit(1761957967.221:1025): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239715 kernel: audit: type=1400 audit(1761957967.221:1026): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.249856 kernel: audit: type=1400 audit(1761957967.221:1027): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.257958 kernel: audit: type=1400 audit(1761957967.221:1028): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.265251 kernel: audit: type=1400 audit(1761957967.221:1029): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.273276 kernel: audit: type=1400 audit(1761957967.221:1030): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.281794 kernel: audit: type=1400 audit(1761957967.221:1031): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.289840 kernel: audit: type=1400 audit(1761957967.221:1032): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.297777 kernel: audit: type=1400 audit(1761957967.221:1033): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.297830 kubelet[2626]: I1101 00:46:07.293310 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jqtnn\" (UniqueName: \"kubernetes.io/projected/da0b54df-6c7c-4295-a916-3e7023bdb682-kube-api-access-jqtnn\") pod \"whisker-5694757584-dtbgp\" (UID: \"da0b54df-6c7c-4295-a916-3e7023bdb682\") " pod="calico-system/whisker-5694757584-dtbgp" Nov 1 00:46:07.297830 kubelet[2626]: I1101 00:46:07.293361 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/da0b54df-6c7c-4295-a916-3e7023bdb682-whisker-backend-key-pair\") pod \"whisker-5694757584-dtbgp\" (UID: \"da0b54df-6c7c-4295-a916-3e7023bdb682\") " pod="calico-system/whisker-5694757584-dtbgp" Nov 1 00:46:07.297830 kubelet[2626]: I1101 00:46:07.293400 2626 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/da0b54df-6c7c-4295-a916-3e7023bdb682-whisker-ca-bundle\") pod \"whisker-5694757584-dtbgp\" (UID: \"da0b54df-6c7c-4295-a916-3e7023bdb682\") " pod="calico-system/whisker-5694757584-dtbgp" Nov 1 00:46:07.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.308951 kernel: audit: type=1400 audit(1761957967.222:1034): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit: BPF prog-id=142 op=LOAD Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4094 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635656231373064333535653561643861663130343736316138623236 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4094 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635656231373064333535653561643861663130343736316138623236 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.222000 audit: BPF prog-id=143 op=LOAD Nov 1 00:46:07.222000 audit[4104]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000384140 items=0 ppid=4094 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635656231373064333535653561643861663130343736316138623236 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.225000 audit: BPF prog-id=144 op=LOAD Nov 1 00:46:07.225000 audit[4104]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000384188 items=0 ppid=4094 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635656231373064333535653561643861663130343736316138623236 Nov 1 00:46:07.239000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:46:07.239000 audit: BPF prog-id=143 op=UNLOAD Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:07.239000 audit: BPF prog-id=145 op=LOAD Nov 1 00:46:07.239000 audit[4104]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000384598 items=0 ppid=4094 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635656231373064333535653561643861663130343736316138623236 Nov 1 00:46:07.335393 env[1736]: time="2025-11-01T00:46:07.330809028Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c99b8d486-hs4b2,Uid:4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc,Namespace:calico-system,Attempt:1,} returns sandbox id \"f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e\"" Nov 1 00:46:07.335393 env[1736]: time="2025-11-01T00:46:07.333070189Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:46:07.476000 audit[4201]: AVC avc: denied { write } for pid=4201 comm="tee" name="fd" dev="proc" ino=26739 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:46:07.476000 audit[4201]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffac54a7df a2=241 a3=1b6 items=1 ppid=4142 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.476000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:46:07.476000 audit: PATH item=0 name="/dev/fd/63" inode=25862 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:46:07.476000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:46:07.478000 audit[4206]: AVC avc: denied { write } for pid=4206 comm="tee" name="fd" dev="proc" ino=26745 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:46:07.479000 audit[4209]: AVC avc: denied { write } for pid=4209 comm="tee" name="fd" dev="proc" ino=26748 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:46:07.482000 audit[4216]: AVC avc: denied { write } for pid=4216 comm="tee" name="fd" dev="proc" ino=26751 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:46:07.482000 audit[4216]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc1d6747cf a2=241 a3=1b6 items=1 ppid=4152 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.482000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:46:07.482000 audit: PATH item=0 name="/dev/fd/63" inode=26736 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:46:07.482000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:46:07.486326 env[1736]: time="2025-11-01T00:46:07.486280735Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5694757584-dtbgp,Uid:da0b54df-6c7c-4295-a916-3e7023bdb682,Namespace:calico-system,Attempt:0,}" Nov 1 00:46:07.478000 audit[4206]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd251dd7d0 a2=241 a3=1b6 items=1 ppid=4145 pid=4206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.478000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:46:07.478000 audit: PATH item=0 name="/dev/fd/63" inode=26728 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:46:07.478000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:46:07.479000 audit[4209]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd2cd6b7e1 a2=241 a3=1b6 items=1 ppid=4144 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.479000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:46:07.479000 audit: PATH item=0 name="/dev/fd/63" inode=26731 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:46:07.479000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:46:07.491000 audit[4211]: AVC avc: denied { write } for pid=4211 comm="tee" name="fd" dev="proc" ino=26755 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:46:07.491000 audit[4211]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffeddc357df a2=241 a3=1b6 items=1 ppid=4141 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.491000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:46:07.491000 audit: PATH item=0 name="/dev/fd/63" inode=26734 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:46:07.491000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:46:07.501000 audit[4214]: AVC avc: denied { write } for pid=4214 comm="tee" name="fd" dev="proc" ino=26759 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:46:07.503000 audit[4203]: AVC avc: denied { write } for pid=4203 comm="tee" name="fd" dev="proc" ino=26762 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:46:07.503000 audit[4203]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd432557e0 a2=241 a3=1b6 items=1 ppid=4147 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.503000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:46:07.503000 audit: PATH item=0 name="/dev/fd/63" inode=26725 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:46:07.503000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:46:07.501000 audit[4214]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe6809c7df a2=241 a3=1b6 items=1 ppid=4148 pid=4214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:07.501000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:46:07.501000 audit: PATH item=0 name="/dev/fd/63" inode=26735 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:46:07.501000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:46:07.583291 env[1736]: time="2025-11-01T00:46:07.583233275Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:07.588900 env[1736]: time="2025-11-01T00:46:07.588782496Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:46:07.590314 kubelet[2626]: E1101 00:46:07.590250 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:46:07.592311 kubelet[2626]: E1101 00:46:07.592262 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:46:07.595982 kubelet[2626]: E1101 00:46:07.595630 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-kube-controllers start failed in pod calico-kube-controllers-6c99b8d486-hs4b2_calico-system(4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:07.595982 kubelet[2626]: E1101 00:46:07.595704 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:46:07.670200 env[1736]: time="2025-11-01T00:46:07.670140459Z" level=info msg="StopPodSandbox for \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\"" Nov 1 00:46:07.671021 env[1736]: time="2025-11-01T00:46:07.670969832Z" level=info msg="StopPodSandbox for \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\"" Nov 1 00:46:07.674443 kubelet[2626]: I1101 00:46:07.674393 2626 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="6d383461-94cd-4c15-a3e9-fabde0929875" path="/var/lib/kubelet/pods/6d383461-94cd-4c15-a3e9-fabde0929875/volumes" Nov 1 00:46:07.835057 systemd-networkd[1460]: cali4ca3dc24906: Link UP Nov 1 00:46:07.839109 systemd-networkd[1460]: cali4ca3dc24906: Gained carrier Nov 1 00:46:07.840168 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4ca3dc24906: link becomes ready Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.574 [INFO][4225] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.599 [INFO][4225] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0 whisker-5694757584- calico-system da0b54df-6c7c-4295-a916-3e7023bdb682 911 0 2025-11-01 00:46:07 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5694757584 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-16-197 whisker-5694757584-dtbgp eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali4ca3dc24906 [] [] }} ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Namespace="calico-system" Pod="whisker-5694757584-dtbgp" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.600 [INFO][4225] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Namespace="calico-system" Pod="whisker-5694757584-dtbgp" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.686 [INFO][4233] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" HandleID="k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Workload="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.686 [INFO][4233] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" HandleID="k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Workload="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd5a0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-16-197", "pod":"whisker-5694757584-dtbgp", "timestamp":"2025-11-01 00:46:07.686429087 +0000 UTC"}, Hostname:"ip-172-31-16-197", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.687 [INFO][4233] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.687 [INFO][4233] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.687 [INFO][4233] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-197' Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.715 [INFO][4233] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.725 [INFO][4233] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.769 [INFO][4233] ipam/ipam.go 511: Trying affinity for 192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.772 [INFO][4233] ipam/ipam.go 158: Attempting to load block cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.779 [INFO][4233] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.780 [INFO][4233] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.71.192/26 handle="k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.791 [INFO][4233] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292 Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.803 [INFO][4233] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.71.192/26 handle="k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.819 [INFO][4233] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.71.194/26] block=192.168.71.192/26 handle="k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.819 [INFO][4233] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.71.194/26] handle="k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" host="ip-172-31-16-197" Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.819 [INFO][4233] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:07.884066 env[1736]: 2025-11-01 00:46:07.819 [INFO][4233] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.71.194/26] IPv6=[] ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" HandleID="k8s-pod-network.8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Workload="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" Nov 1 00:46:07.885283 env[1736]: 2025-11-01 00:46:07.827 [INFO][4225] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Namespace="calico-system" Pod="whisker-5694757584-dtbgp" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0", GenerateName:"whisker-5694757584-", Namespace:"calico-system", SelfLink:"", UID:"da0b54df-6c7c-4295-a916-3e7023bdb682", ResourceVersion:"911", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 46, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5694757584", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"", Pod:"whisker-5694757584-dtbgp", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.71.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali4ca3dc24906", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:07.885283 env[1736]: 2025-11-01 00:46:07.827 [INFO][4225] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.71.194/32] ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Namespace="calico-system" Pod="whisker-5694757584-dtbgp" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" Nov 1 00:46:07.885283 env[1736]: 2025-11-01 00:46:07.827 [INFO][4225] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4ca3dc24906 ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Namespace="calico-system" Pod="whisker-5694757584-dtbgp" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" Nov 1 00:46:07.885283 env[1736]: 2025-11-01 00:46:07.841 [INFO][4225] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Namespace="calico-system" Pod="whisker-5694757584-dtbgp" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" Nov 1 00:46:07.885283 env[1736]: 2025-11-01 00:46:07.842 [INFO][4225] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Namespace="calico-system" Pod="whisker-5694757584-dtbgp" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0", GenerateName:"whisker-5694757584-", Namespace:"calico-system", SelfLink:"", UID:"da0b54df-6c7c-4295-a916-3e7023bdb682", ResourceVersion:"911", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 46, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5694757584", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292", Pod:"whisker-5694757584-dtbgp", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.71.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali4ca3dc24906", MAC:"8a:86:b9:06:cd:85", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:07.885283 env[1736]: 2025-11-01 00:46:07.880 [INFO][4225] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292" Namespace="calico-system" Pod="whisker-5694757584-dtbgp" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--5694757584--dtbgp-eth0" Nov 1 00:46:07.938584 env[1736]: time="2025-11-01T00:46:07.938474700Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:46:07.938912 env[1736]: time="2025-11-01T00:46:07.938862337Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:46:07.939590 env[1736]: time="2025-11-01T00:46:07.939128192Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:46:07.939967 env[1736]: time="2025-11-01T00:46:07.939879615Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292 pid=4289 runtime=io.containerd.runc.v2 Nov 1 00:46:08.002553 kubelet[2626]: E1101 00:46:08.002148 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:46:08.036010 systemd[1]: Started cri-containerd-8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292.scope. Nov 1 00:46:08.052526 systemd[1]: run-containerd-runc-k8s.io-8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292-runc.5ZfFHD.mount: Deactivated successfully. Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.889 [INFO][4260] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.890 [INFO][4260] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" iface="eth0" netns="/var/run/netns/cni-fa5c1bb7-a256-b9ed-4ba4-6b07fb533a25" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.890 [INFO][4260] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" iface="eth0" netns="/var/run/netns/cni-fa5c1bb7-a256-b9ed-4ba4-6b07fb533a25" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.890 [INFO][4260] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" iface="eth0" netns="/var/run/netns/cni-fa5c1bb7-a256-b9ed-4ba4-6b07fb533a25" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.890 [INFO][4260] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.890 [INFO][4260] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.992 [INFO][4277] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.993 [INFO][4277] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:07.993 [INFO][4277] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:08.070 [WARNING][4277] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:08.070 [INFO][4277] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:08.083 [INFO][4277] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:08.088710 env[1736]: 2025-11-01 00:46:08.085 [INFO][4260] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:08.091131 env[1736]: time="2025-11-01T00:46:08.091000822Z" level=info msg="TearDown network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\" successfully" Nov 1 00:46:08.092869 env[1736]: time="2025-11-01T00:46:08.092822810Z" level=info msg="StopPodSandbox for \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\" returns successfully" Nov 1 00:46:08.099024 env[1736]: time="2025-11-01T00:46:08.098968835Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-66bc5c9577-2mpph,Uid:26320c11-fd44-44ad-b136-f0d68f311c28,Namespace:kube-system,Attempt:1,}" Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.110000 audit: BPF prog-id=146 op=LOAD Nov 1 00:46:08.114000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.114000 audit[4308]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4289 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865333233396661643639323039643434646534396337376263323235 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4289 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865333233396661643639323039643434646534396337376263323235 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.115000 audit: BPF prog-id=147 op=LOAD Nov 1 00:46:08.115000 audit[4308]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002fe820 items=0 ppid=4289 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865333233396661643639323039643434646534396337376263323235 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.116000 audit: BPF prog-id=148 op=LOAD Nov 1 00:46:08.116000 audit[4308]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002fe868 items=0 ppid=4289 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865333233396661643639323039643434646534396337376263323235 Nov 1 00:46:08.117000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:46:08.117000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { perfmon } for pid=4308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit[4308]: AVC avc: denied { bpf } for pid=4308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.117000 audit: BPF prog-id=149 op=LOAD Nov 1 00:46:08.117000 audit[4308]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002fec78 items=0 ppid=4289 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865333233396661643639323039643434646534396337376263323235 Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:07.923 [INFO][4258] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:07.924 [INFO][4258] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" iface="eth0" netns="/var/run/netns/cni-b9212cae-8cd9-48e3-d997-b033bea2534f" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:07.924 [INFO][4258] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" iface="eth0" netns="/var/run/netns/cni-b9212cae-8cd9-48e3-d997-b033bea2534f" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:07.924 [INFO][4258] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" iface="eth0" netns="/var/run/netns/cni-b9212cae-8cd9-48e3-d997-b033bea2534f" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:07.924 [INFO][4258] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:07.924 [INFO][4258] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:08.068 [INFO][4298] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:08.068 [INFO][4298] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:08.094 [INFO][4298] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:08.128 [WARNING][4298] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:08.128 [INFO][4298] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:08.131 [INFO][4298] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:08.138207 env[1736]: 2025-11-01 00:46:08.133 [INFO][4258] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:08.140317 env[1736]: time="2025-11-01T00:46:08.139904201Z" level=info msg="TearDown network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\" successfully" Nov 1 00:46:08.140317 env[1736]: time="2025-11-01T00:46:08.139978189Z" level=info msg="StopPodSandbox for \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\" returns successfully" Nov 1 00:46:08.144417 env[1736]: time="2025-11-01T00:46:08.144376860Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7c778bb748-5czvc,Uid:b1382796-d43e-42cf-9f8e-009d999e587c,Namespace:calico-system,Attempt:1,}" Nov 1 00:46:08.297910 systemd-networkd[1460]: calif600e4653cb: Gained IPv6LL Nov 1 00:46:08.299357 env[1736]: time="2025-11-01T00:46:08.299314412Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5694757584-dtbgp,Uid:da0b54df-6c7c-4295-a916-3e7023bdb682,Namespace:calico-system,Attempt:0,} returns sandbox id \"8e3239fad69209d44de49c77bc2255906c33a724d55cdfffeb99d50bba4df292\"" Nov 1 00:46:08.302090 env[1736]: time="2025-11-01T00:46:08.302057431Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:46:08.479580 systemd-networkd[1460]: calia3600f94340: Link UP Nov 1 00:46:08.483581 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:46:08.483705 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia3600f94340: link becomes ready Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.484041 systemd-networkd[1460]: calia3600f94340: Gained carrier Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.483000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.483000 audit: BPF prog-id=150 op=LOAD Nov 1 00:46:08.483000 audit[4401]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe794d0b50 a2=98 a3=1fffffffffffffff items=0 ppid=4146 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.483000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:46:08.485000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit: BPF prog-id=151 op=LOAD Nov 1 00:46:08.486000 audit[4401]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe794d0a30 a2=94 a3=3 items=0 ppid=4146 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.486000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:46:08.486000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { bpf } for pid=4401 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit: BPF prog-id=152 op=LOAD Nov 1 00:46:08.486000 audit[4401]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe794d0a70 a2=94 a3=7ffe794d0c50 items=0 ppid=4146 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.486000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:46:08.486000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:46:08.486000 audit[4401]: AVC avc: denied { perfmon } for pid=4401 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.486000 audit[4401]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe794d0b40 a2=50 a3=a000000085 items=0 ppid=4146 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.486000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.491000 audit: BPF prog-id=153 op=LOAD Nov 1 00:46:08.491000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff6bb14cd0 a2=98 a3=3 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.491000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:08.491000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit: BPF prog-id=154 op=LOAD Nov 1 00:46:08.492000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff6bb14ac0 a2=94 a3=54428f items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:08.492000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.492000 audit: BPF prog-id=155 op=LOAD Nov 1 00:46:08.492000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff6bb14af0 a2=94 a3=2 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:08.493000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.288 [INFO][4329] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0 coredns-66bc5c9577- kube-system 26320c11-fd44-44ad-b136-f0d68f311c28 922 0 2025-11-01 00:45:27 +0000 UTC map[k8s-app:kube-dns pod-template-hash:66bc5c9577 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-16-197 coredns-66bc5c9577-2mpph eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calia3600f94340 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 } {liveness-probe TCP 8080 0 } {readiness-probe TCP 8181 0 }] [] }} ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Namespace="kube-system" Pod="coredns-66bc5c9577-2mpph" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.288 [INFO][4329] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Namespace="kube-system" Pod="coredns-66bc5c9577-2mpph" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.389 [INFO][4366] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" HandleID="k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.389 [INFO][4366] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" HandleID="k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002adbe0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-16-197", "pod":"coredns-66bc5c9577-2mpph", "timestamp":"2025-11-01 00:46:08.389001007 +0000 UTC"}, Hostname:"ip-172-31-16-197", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.389 [INFO][4366] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.389 [INFO][4366] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.389 [INFO][4366] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-197' Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.422 [INFO][4366] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.429 [INFO][4366] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.438 [INFO][4366] ipam/ipam.go 511: Trying affinity for 192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.445 [INFO][4366] ipam/ipam.go 158: Attempting to load block cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.450 [INFO][4366] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.450 [INFO][4366] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.71.192/26 handle="k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.453 [INFO][4366] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.460 [INFO][4366] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.71.192/26 handle="k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.471 [INFO][4366] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.71.195/26] block=192.168.71.192/26 handle="k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.471 [INFO][4366] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.71.195/26] handle="k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" host="ip-172-31-16-197" Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.471 [INFO][4366] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:08.522161 env[1736]: 2025-11-01 00:46:08.472 [INFO][4366] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.71.195/26] IPv6=[] ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" HandleID="k8s-pod-network.5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.523642 env[1736]: 2025-11-01 00:46:08.477 [INFO][4329] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Namespace="kube-system" Pod="coredns-66bc5c9577-2mpph" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0", GenerateName:"coredns-66bc5c9577-", Namespace:"kube-system", SelfLink:"", UID:"26320c11-fd44-44ad-b136-f0d68f311c28", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"66bc5c9577", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"", Pod:"coredns-66bc5c9577-2mpph", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.71.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia3600f94340", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"liveness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1f90, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"readiness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1ff5, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:08.523642 env[1736]: 2025-11-01 00:46:08.477 [INFO][4329] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.71.195/32] ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Namespace="kube-system" Pod="coredns-66bc5c9577-2mpph" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.523642 env[1736]: 2025-11-01 00:46:08.477 [INFO][4329] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia3600f94340 ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Namespace="kube-system" Pod="coredns-66bc5c9577-2mpph" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.523642 env[1736]: 2025-11-01 00:46:08.485 [INFO][4329] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Namespace="kube-system" Pod="coredns-66bc5c9577-2mpph" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.523642 env[1736]: 2025-11-01 00:46:08.488 [INFO][4329] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Namespace="kube-system" Pod="coredns-66bc5c9577-2mpph" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0", GenerateName:"coredns-66bc5c9577-", Namespace:"kube-system", SelfLink:"", UID:"26320c11-fd44-44ad-b136-f0d68f311c28", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"66bc5c9577", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c", Pod:"coredns-66bc5c9577-2mpph", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.71.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia3600f94340", MAC:"3a:4a:f3:70:7d:5f", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"liveness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1f90, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"readiness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1ff5, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:08.523642 env[1736]: 2025-11-01 00:46:08.515 [INFO][4329] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c" Namespace="kube-system" Pod="coredns-66bc5c9577-2mpph" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:08.551165 env[1736]: time="2025-11-01T00:46:08.551117463Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:08.556647 env[1736]: time="2025-11-01T00:46:08.556578390Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:46:08.559446 kubelet[2626]: E1101 00:46:08.558781 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:46:08.559446 kubelet[2626]: E1101 00:46:08.558853 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:46:08.559446 kubelet[2626]: E1101 00:46:08.558962 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container whisker start failed in pod whisker-5694757584-dtbgp_calico-system(da0b54df-6c7c-4295-a916-3e7023bdb682): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:08.561051 env[1736]: time="2025-11-01T00:46:08.561018097Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:46:08.563018 env[1736]: time="2025-11-01T00:46:08.562940744Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:46:08.563261 env[1736]: time="2025-11-01T00:46:08.563218844Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:46:08.563408 env[1736]: time="2025-11-01T00:46:08.563381990Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:46:08.564944 env[1736]: time="2025-11-01T00:46:08.564902416Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c pid=4417 runtime=io.containerd.runc.v2 Nov 1 00:46:08.589029 systemd[1]: Started cri-containerd-5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c.scope. Nov 1 00:46:08.632639 systemd-networkd[1460]: calic9137587fbf: Link UP Nov 1 00:46:08.634969 systemd-networkd[1460]: calic9137587fbf: Gained carrier Nov 1 00:46:08.635787 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic9137587fbf: link becomes ready Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.646000 audit: BPF prog-id=156 op=LOAD Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313466646163313134633838383835643430663935363133613731 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313466646163313134633838383835643430663935363133613731 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.648000 audit: BPF prog-id=157 op=LOAD Nov 1 00:46:08.648000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025070 items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313466646163313134633838383835643430663935363133613731 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.651000 audit: BPF prog-id=158 op=LOAD Nov 1 00:46:08.651000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000250b8 items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313466646163313134633838383835643430663935363133613731 Nov 1 00:46:08.652000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:46:08.652000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.652000 audit: BPF prog-id=159 op=LOAD Nov 1 00:46:08.652000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000254c8 items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564313466646163313134633838383835643430663935363133613731 Nov 1 00:46:08.667844 env[1736]: time="2025-11-01T00:46:08.667795358Z" level=info msg="StopPodSandbox for \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\"" Nov 1 00:46:08.703062 systemd[1]: run-netns-cni\x2db9212cae\x2d8cd9\x2d48e3\x2dd997\x2db033bea2534f.mount: Deactivated successfully. Nov 1 00:46:08.703927 systemd[1]: run-netns-cni\x2dfa5c1bb7\x2da256\x2db9ed\x2d4ba4\x2d6b07fb533a25.mount: Deactivated successfully. Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.336 [INFO][4338] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0 goldmane-7c778bb748- calico-system b1382796-d43e-42cf-9f8e-009d999e587c 923 0 2025-11-01 00:45:42 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:7c778bb748 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-16-197 goldmane-7c778bb748-5czvc eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic9137587fbf [] [] }} ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Namespace="calico-system" Pod="goldmane-7c778bb748-5czvc" WorkloadEndpoint="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.337 [INFO][4338] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Namespace="calico-system" Pod="goldmane-7c778bb748-5czvc" WorkloadEndpoint="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.457 [INFO][4379] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" HandleID="k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.457 [INFO][4379] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" HandleID="k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ac260), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-16-197", "pod":"goldmane-7c778bb748-5czvc", "timestamp":"2025-11-01 00:46:08.457488465 +0000 UTC"}, Hostname:"ip-172-31-16-197", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.457 [INFO][4379] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.472 [INFO][4379] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.472 [INFO][4379] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-197' Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.525 [INFO][4379] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.535 [INFO][4379] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.545 [INFO][4379] ipam/ipam.go 511: Trying affinity for 192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.550 [INFO][4379] ipam/ipam.go 158: Attempting to load block cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.558 [INFO][4379] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.558 [INFO][4379] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.71.192/26 handle="k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.567 [INFO][4379] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002 Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.577 [INFO][4379] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.71.192/26 handle="k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.617 [INFO][4379] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.71.196/26] block=192.168.71.192/26 handle="k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.617 [INFO][4379] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.71.196/26] handle="k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" host="ip-172-31-16-197" Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.617 [INFO][4379] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:08.714661 env[1736]: 2025-11-01 00:46:08.617 [INFO][4379] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.71.196/26] IPv6=[] ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" HandleID="k8s-pod-network.7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.716600 env[1736]: 2025-11-01 00:46:08.630 [INFO][4338] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Namespace="calico-system" Pod="goldmane-7c778bb748-5czvc" WorkloadEndpoint="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0", GenerateName:"goldmane-7c778bb748-", Namespace:"calico-system", SelfLink:"", UID:"b1382796-d43e-42cf-9f8e-009d999e587c", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7c778bb748", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"", Pod:"goldmane-7c778bb748-5czvc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.71.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic9137587fbf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:08.716600 env[1736]: 2025-11-01 00:46:08.630 [INFO][4338] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.71.196/32] ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Namespace="calico-system" Pod="goldmane-7c778bb748-5czvc" WorkloadEndpoint="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.716600 env[1736]: 2025-11-01 00:46:08.630 [INFO][4338] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic9137587fbf ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Namespace="calico-system" Pod="goldmane-7c778bb748-5czvc" WorkloadEndpoint="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.716600 env[1736]: 2025-11-01 00:46:08.636 [INFO][4338] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Namespace="calico-system" Pod="goldmane-7c778bb748-5czvc" WorkloadEndpoint="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.716600 env[1736]: 2025-11-01 00:46:08.636 [INFO][4338] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Namespace="calico-system" Pod="goldmane-7c778bb748-5czvc" WorkloadEndpoint="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0", GenerateName:"goldmane-7c778bb748-", Namespace:"calico-system", SelfLink:"", UID:"b1382796-d43e-42cf-9f8e-009d999e587c", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7c778bb748", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002", Pod:"goldmane-7c778bb748-5czvc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.71.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic9137587fbf", MAC:"5e:36:88:9c:23:6e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:08.716600 env[1736]: 2025-11-01 00:46:08.711 [INFO][4338] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002" Namespace="calico-system" Pod="goldmane-7c778bb748-5czvc" WorkloadEndpoint="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:08.787206 env[1736]: time="2025-11-01T00:46:08.779596500Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:46:08.787206 env[1736]: time="2025-11-01T00:46:08.779663245Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:46:08.787206 env[1736]: time="2025-11-01T00:46:08.779680189Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:46:08.791837 env[1736]: time="2025-11-01T00:46:08.789079023Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002 pid=4478 runtime=io.containerd.runc.v2 Nov 1 00:46:08.794013 env[1736]: time="2025-11-01T00:46:08.793968649Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-66bc5c9577-2mpph,Uid:26320c11-fd44-44ad-b136-f0d68f311c28,Namespace:kube-system,Attempt:1,} returns sandbox id \"5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c\"" Nov 1 00:46:08.811770 env[1736]: time="2025-11-01T00:46:08.811717383Z" level=info msg="CreateContainer within sandbox \"5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:46:08.816524 env[1736]: time="2025-11-01T00:46:08.816345555Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:08.820287 systemd[1]: Started cri-containerd-7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002.scope. Nov 1 00:46:08.834337 env[1736]: time="2025-11-01T00:46:08.833877073Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:46:08.834480 kubelet[2626]: E1101 00:46:08.834378 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:46:08.834480 kubelet[2626]: E1101 00:46:08.834424 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:46:08.834591 kubelet[2626]: E1101 00:46:08.834515 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container whisker-backend start failed in pod whisker-5694757584-dtbgp_calico-system(da0b54df-6c7c-4295-a916-3e7023bdb682): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:08.834635 kubelet[2626]: E1101 00:46:08.834571 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:46:08.844692 systemd[1]: run-containerd-runc-k8s.io-7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002-runc.4eNrES.mount: Deactivated successfully. Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.878000 audit: BPF prog-id=160 op=LOAD Nov 1 00:46:08.879000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.879000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4478 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764396634393632363564343039376530373033336432646131326135 Nov 1 00:46:08.879000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.879000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4478 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764396634393632363564343039376530373033336432646131326135 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.880000 audit: BPF prog-id=161 op=LOAD Nov 1 00:46:08.880000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000253cd0 items=0 ppid=4478 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764396634393632363564343039376530373033336432646131326135 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.881000 audit: BPF prog-id=162 op=LOAD Nov 1 00:46:08.881000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000253d18 items=0 ppid=4478 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764396634393632363564343039376530373033336432646131326135 Nov 1 00:46:08.883000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:46:08.883000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:08.883000 audit: BPF prog-id=163 op=LOAD Nov 1 00:46:08.883000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000362128 items=0 ppid=4478 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764396634393632363564343039376530373033336432646131326135 Nov 1 00:46:08.923986 env[1736]: time="2025-11-01T00:46:08.923931663Z" level=info msg="CreateContainer within sandbox \"5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"501d388ae675d48869c7610e7b2432e695b2ddef9ea50f73ae1ba16f5c2412d1\"" Nov 1 00:46:08.925057 env[1736]: time="2025-11-01T00:46:08.925025486Z" level=info msg="StartContainer for \"501d388ae675d48869c7610e7b2432e695b2ddef9ea50f73ae1ba16f5c2412d1\"" Nov 1 00:46:08.981488 systemd[1]: Started cri-containerd-501d388ae675d48869c7610e7b2432e695b2ddef9ea50f73ae1ba16f5c2412d1.scope. Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.901 [INFO][4456] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.901 [INFO][4456] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" iface="eth0" netns="/var/run/netns/cni-2aabc2dd-276e-f302-b440-ef0eac348ac0" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.901 [INFO][4456] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" iface="eth0" netns="/var/run/netns/cni-2aabc2dd-276e-f302-b440-ef0eac348ac0" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.901 [INFO][4456] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" iface="eth0" netns="/var/run/netns/cni-2aabc2dd-276e-f302-b440-ef0eac348ac0" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.901 [INFO][4456] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.901 [INFO][4456] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.958 [INFO][4507] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.958 [INFO][4507] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.958 [INFO][4507] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.983 [WARNING][4507] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.983 [INFO][4507] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.992 [INFO][4507] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:08.997805 env[1736]: 2025-11-01 00:46:08.995 [INFO][4456] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:08.998719 env[1736]: time="2025-11-01T00:46:08.998671598Z" level=info msg="TearDown network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\" successfully" Nov 1 00:46:08.998947 env[1736]: time="2025-11-01T00:46:08.998918170Z" level=info msg="StopPodSandbox for \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\" returns successfully" Nov 1 00:46:09.003625 env[1736]: time="2025-11-01T00:46:09.003584427Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-66bc5c9577-2xnzk,Uid:7e26727d-5219-45e0-9b07-a268a5569ad2,Namespace:kube-system,Attempt:1,}" Nov 1 00:46:09.011253 kubelet[2626]: E1101 00:46:09.011160 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:46:09.013089 kubelet[2626]: E1101 00:46:09.013004 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.075000 audit: BPF prog-id=164 op=LOAD Nov 1 00:46:09.084000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.084000 audit[4518]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4417 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.084000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530316433383861653637356434383836396337363130653762323433 Nov 1 00:46:09.084000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.084000 audit[4518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4417 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.084000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530316433383861653637356434383836396337363130653762323433 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.087000 audit: BPF prog-id=165 op=LOAD Nov 1 00:46:09.087000 audit[4518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000211330 items=0 ppid=4417 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530316433383861653637356434383836396337363130653762323433 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.088000 audit: BPF prog-id=166 op=LOAD Nov 1 00:46:09.088000 audit[4518]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000211378 items=0 ppid=4417 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530316433383861653637356434383836396337363130653762323433 Nov 1 00:46:09.089000 audit: BPF prog-id=166 op=UNLOAD Nov 1 00:46:09.089000 audit: BPF prog-id=165 op=UNLOAD Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.089000 audit: BPF prog-id=167 op=LOAD Nov 1 00:46:09.089000 audit[4518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000211788 items=0 ppid=4417 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530316433383861653637356434383836396337363130653762323433 Nov 1 00:46:09.104282 env[1736]: time="2025-11-01T00:46:09.104226631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7c778bb748-5czvc,Uid:b1382796-d43e-42cf-9f8e-009d999e587c,Namespace:calico-system,Attempt:1,} returns sandbox id \"7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002\"" Nov 1 00:46:09.106564 env[1736]: time="2025-11-01T00:46:09.106526077Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:46:09.140050 env[1736]: time="2025-11-01T00:46:09.139959799Z" level=info msg="StartContainer for \"501d388ae675d48869c7610e7b2432e695b2ddef9ea50f73ae1ba16f5c2412d1\" returns successfully" Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit: BPF prog-id=168 op=LOAD Nov 1 00:46:09.263000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff6bb149b0 a2=94 a3=1 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.263000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.263000 audit: BPF prog-id=168 op=UNLOAD Nov 1 00:46:09.263000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.263000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff6bb14a80 a2=50 a3=7fff6bb14b60 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.263000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6bb149c0 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6bb149f0 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6bb14900 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6bb14a10 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6bb149f0 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6bb149e0 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6bb14a10 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6bb149f0 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6bb14a10 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.289000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.289000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6bb149e0 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.289000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.290000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.290000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6bb14a50 a2=28 a3=0 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.290000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff6bb14800 a2=50 a3=1 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.291000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit: BPF prog-id=169 op=LOAD Nov 1 00:46:09.291000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff6bb14800 a2=94 a3=5 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.291000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.291000 audit: BPF prog-id=169 op=UNLOAD Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff6bb148b0 a2=50 a3=1 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.291000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff6bb149d0 a2=4 a3=38 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.291000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { confidentiality } for pid=4405 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:46:09.291000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff6bb14a20 a2=94 a3=6 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.291000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.291000 audit[4405]: AVC avc: denied { confidentiality } for pid=4405 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:46:09.291000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff6bb141d0 a2=94 a3=88 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.291000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.292000 audit[4405]: AVC avc: denied { confidentiality } for pid=4405 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:46:09.292000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff6bb141d0 a2=94 a3=88 items=0 ppid=4146 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.292000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:46:09.306000 audit[4568]: NETFILTER_CFG table=filter:103 family=2 entries=20 op=nft_register_rule pid=4568 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:09.306000 audit[4568]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc689dab00 a2=0 a3=7ffc689daaec items=0 ppid=2914 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.306000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:09.317136 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali61c2bfb3dc9: link becomes ready Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit: BPF prog-id=170 op=LOAD Nov 1 00:46:09.313000 audit[4572]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcec9ed7a0 a2=98 a3=1999999999999999 items=0 ppid=4146 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.313000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:46:09.313000 audit: BPF prog-id=170 op=UNLOAD Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit: BPF prog-id=171 op=LOAD Nov 1 00:46:09.313000 audit[4572]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcec9ed680 a2=94 a3=ffff items=0 ppid=4146 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.313000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:46:09.313000 audit: BPF prog-id=171 op=UNLOAD Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { perfmon } for pid=4572 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit[4572]: AVC avc: denied { bpf } for pid=4572 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.313000 audit: BPF prog-id=172 op=LOAD Nov 1 00:46:09.313000 audit[4572]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcec9ed6c0 a2=94 a3=7ffcec9ed8a0 items=0 ppid=4146 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.313000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:46:09.313000 audit: BPF prog-id=172 op=UNLOAD Nov 1 00:46:09.317407 systemd-networkd[1460]: cali61c2bfb3dc9: Link UP Nov 1 00:46:09.317624 systemd-networkd[1460]: cali61c2bfb3dc9: Gained carrier Nov 1 00:46:09.326000 audit[4568]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=4568 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:09.326000 audit[4568]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc689dab00 a2=0 a3=0 items=0 ppid=2914 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.326000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.191 [INFO][4534] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0 coredns-66bc5c9577- kube-system 7e26727d-5219-45e0-9b07-a268a5569ad2 943 0 2025-11-01 00:45:27 +0000 UTC map[k8s-app:kube-dns pod-template-hash:66bc5c9577 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-16-197 coredns-66bc5c9577-2xnzk eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali61c2bfb3dc9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 } {liveness-probe TCP 8080 0 } {readiness-probe TCP 8181 0 }] [] }} ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Namespace="kube-system" Pod="coredns-66bc5c9577-2xnzk" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.192 [INFO][4534] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Namespace="kube-system" Pod="coredns-66bc5c9577-2xnzk" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.239 [INFO][4561] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" HandleID="k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.239 [INFO][4561] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" HandleID="k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad3a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-16-197", "pod":"coredns-66bc5c9577-2xnzk", "timestamp":"2025-11-01 00:46:09.239719313 +0000 UTC"}, Hostname:"ip-172-31-16-197", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.240 [INFO][4561] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.240 [INFO][4561] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.240 [INFO][4561] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-197' Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.250 [INFO][4561] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.257 [INFO][4561] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.266 [INFO][4561] ipam/ipam.go 511: Trying affinity for 192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.270 [INFO][4561] ipam/ipam.go 158: Attempting to load block cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.274 [INFO][4561] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.274 [INFO][4561] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.71.192/26 handle="k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.277 [INFO][4561] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43 Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.282 [INFO][4561] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.71.192/26 handle="k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.305 [INFO][4561] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.71.197/26] block=192.168.71.192/26 handle="k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.305 [INFO][4561] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.71.197/26] handle="k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" host="ip-172-31-16-197" Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.305 [INFO][4561] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:09.357607 env[1736]: 2025-11-01 00:46:09.305 [INFO][4561] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.71.197/26] IPv6=[] ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" HandleID="k8s-pod-network.1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:09.358599 env[1736]: 2025-11-01 00:46:09.308 [INFO][4534] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Namespace="kube-system" Pod="coredns-66bc5c9577-2xnzk" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0", GenerateName:"coredns-66bc5c9577-", Namespace:"kube-system", SelfLink:"", UID:"7e26727d-5219-45e0-9b07-a268a5569ad2", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"66bc5c9577", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"", Pod:"coredns-66bc5c9577-2xnzk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.71.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali61c2bfb3dc9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"liveness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1f90, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"readiness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1ff5, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:09.358599 env[1736]: 2025-11-01 00:46:09.308 [INFO][4534] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.71.197/32] ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Namespace="kube-system" Pod="coredns-66bc5c9577-2xnzk" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:09.358599 env[1736]: 2025-11-01 00:46:09.308 [INFO][4534] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali61c2bfb3dc9 ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Namespace="kube-system" Pod="coredns-66bc5c9577-2xnzk" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:09.358599 env[1736]: 2025-11-01 00:46:09.328 [INFO][4534] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Namespace="kube-system" Pod="coredns-66bc5c9577-2xnzk" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:09.358599 env[1736]: 2025-11-01 00:46:09.328 [INFO][4534] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Namespace="kube-system" Pod="coredns-66bc5c9577-2xnzk" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0", GenerateName:"coredns-66bc5c9577-", Namespace:"kube-system", SelfLink:"", UID:"7e26727d-5219-45e0-9b07-a268a5569ad2", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"66bc5c9577", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43", Pod:"coredns-66bc5c9577-2xnzk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.71.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali61c2bfb3dc9", MAC:"86:f5:5d:f2:0d:2b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"liveness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1f90, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"readiness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1ff5, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:09.358599 env[1736]: 2025-11-01 00:46:09.353 [INFO][4534] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43" Namespace="kube-system" Pod="coredns-66bc5c9577-2xnzk" WorkloadEndpoint="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:09.378923 env[1736]: time="2025-11-01T00:46:09.378834669Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:46:09.379126 env[1736]: time="2025-11-01T00:46:09.378953431Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:46:09.379126 env[1736]: time="2025-11-01T00:46:09.379009591Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:46:09.379314 env[1736]: time="2025-11-01T00:46:09.379272217Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43 pid=4596 runtime=io.containerd.runc.v2 Nov 1 00:46:09.417564 systemd[1]: Started cri-containerd-1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43.scope. Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.436000 audit: BPF prog-id=173 op=LOAD Nov 1 00:46:09.437000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.437000 audit[4607]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4596 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162373939313737323166316136343736653263666335616637353933 Nov 1 00:46:09.437000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.437000 audit[4607]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4596 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162373939313737323166316136343736653263666335616637353933 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.438000 audit: BPF prog-id=174 op=LOAD Nov 1 00:46:09.438000 audit[4607]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003e4150 items=0 ppid=4596 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162373939313737323166316136343736653263666335616637353933 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.439000 audit: BPF prog-id=175 op=LOAD Nov 1 00:46:09.439000 audit[4607]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003e4198 items=0 ppid=4596 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162373939313737323166316136343736653263666335616637353933 Nov 1 00:46:09.440000 audit: BPF prog-id=175 op=UNLOAD Nov 1 00:46:09.440000 audit: BPF prog-id=174 op=UNLOAD Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { perfmon } for pid=4607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit[4607]: AVC avc: denied { bpf } for pid=4607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.440000 audit: BPF prog-id=176 op=LOAD Nov 1 00:46:09.440000 audit[4607]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003e45a8 items=0 ppid=4596 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162373939313737323166316136343736653263666335616637353933 Nov 1 00:46:09.479583 env[1736]: time="2025-11-01T00:46:09.479534251Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:09.482884 env[1736]: time="2025-11-01T00:46:09.482822519Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:46:09.483902 kubelet[2626]: E1101 00:46:09.483259 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:46:09.483902 kubelet[2626]: E1101 00:46:09.483322 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:46:09.483902 kubelet[2626]: E1101 00:46:09.483436 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container goldmane start failed in pod goldmane-7c778bb748-5czvc_calico-system(b1382796-d43e-42cf-9f8e-009d999e587c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:09.483902 kubelet[2626]: E1101 00:46:09.483480 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:46:09.493168 systemd-networkd[1460]: vxlan.calico: Link UP Nov 1 00:46:09.493179 systemd-networkd[1460]: vxlan.calico: Gained carrier Nov 1 00:46:09.498900 env[1736]: time="2025-11-01T00:46:09.498850199Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-66bc5c9577-2xnzk,Uid:7e26727d-5219-45e0-9b07-a268a5569ad2,Namespace:kube-system,Attempt:1,} returns sandbox id \"1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43\"" Nov 1 00:46:09.510514 env[1736]: time="2025-11-01T00:46:09.510468712Z" level=info msg="CreateContainer within sandbox \"1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:46:09.534252 (udev-worker)[3956]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.537000 audit: BPF prog-id=177 op=LOAD Nov 1 00:46:09.537000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd88ee7b60 a2=98 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.537000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.537000 audit: BPF prog-id=177 op=UNLOAD Nov 1 00:46:09.541059 env[1736]: time="2025-11-01T00:46:09.540997460Z" level=info msg="CreateContainer within sandbox \"1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"bf8e4be9c0d775f16903916684e99106fe0f2f892dd49fa91e3b14631eaaa17f\"" Nov 1 00:46:09.542018 env[1736]: time="2025-11-01T00:46:09.541981736Z" level=info msg="StartContainer for \"bf8e4be9c0d775f16903916684e99106fe0f2f892dd49fa91e3b14631eaaa17f\"" Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit: BPF prog-id=178 op=LOAD Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd88ee7970 a2=94 a3=54428f items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit: BPF prog-id=178 op=UNLOAD Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit: BPF prog-id=179 op=LOAD Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd88ee79a0 a2=94 a3=2 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit: BPF prog-id=179 op=UNLOAD Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd88ee7870 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd88ee78a0 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd88ee77b0 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd88ee78c0 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd88ee78a0 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd88ee7890 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd88ee78c0 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd88ee78a0 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd88ee78c0 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd88ee7890 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.572000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.572000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd88ee7900 a2=28 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.572000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.573000 audit: BPF prog-id=180 op=LOAD Nov 1 00:46:09.573000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd88ee7770 a2=94 a3=0 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.573000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.573000 audit: BPF prog-id=180 op=UNLOAD Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffd88ee7760 a2=50 a3=2800 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.580000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffd88ee7760 a2=50 a3=2800 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.580000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit: BPF prog-id=181 op=LOAD Nov 1 00:46:09.580000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd88ee6f80 a2=94 a3=2 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.580000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.580000 audit: BPF prog-id=181 op=UNLOAD Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.580000 audit: BPF prog-id=182 op=LOAD Nov 1 00:46:09.580000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd88ee7080 a2=94 a3=30 items=0 ppid=4146 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.580000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.590000 audit: BPF prog-id=183 op=LOAD Nov 1 00:46:09.590000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeeb194810 a2=98 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.590000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.590000 audit: BPF prog-id=183 op=UNLOAD Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit: BPF prog-id=184 op=LOAD Nov 1 00:46:09.591000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeeb194600 a2=94 a3=54428f items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.591000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.591000 audit: BPF prog-id=184 op=UNLOAD Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.591000 audit: BPF prog-id=185 op=LOAD Nov 1 00:46:09.591000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeeb194630 a2=94 a3=2 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.591000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.591000 audit: BPF prog-id=185 op=UNLOAD Nov 1 00:46:09.602935 systemd[1]: Started cri-containerd-bf8e4be9c0d775f16903916684e99106fe0f2f892dd49fa91e3b14631eaaa17f.scope. Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.645000 audit: BPF prog-id=186 op=LOAD Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4596 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386534626539633064373735663136393033393136363834653939 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4596 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386534626539633064373735663136393033393136363834653939 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit: BPF prog-id=187 op=LOAD Nov 1 00:46:09.646000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000208410 items=0 ppid=4596 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386534626539633064373735663136393033393136363834653939 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit: BPF prog-id=188 op=LOAD Nov 1 00:46:09.646000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000208458 items=0 ppid=4596 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386534626539633064373735663136393033393136363834653939 Nov 1 00:46:09.646000 audit: BPF prog-id=188 op=UNLOAD Nov 1 00:46:09.646000 audit: BPF prog-id=187 op=UNLOAD Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.646000 audit: BPF prog-id=189 op=LOAD Nov 1 00:46:09.646000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000208868 items=0 ppid=4596 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266386534626539633064373735663136393033393136363834653939 Nov 1 00:46:09.670561 env[1736]: time="2025-11-01T00:46:09.670505112Z" level=info msg="StopPodSandbox for \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\"" Nov 1 00:46:09.673163 env[1736]: time="2025-11-01T00:46:09.673009766Z" level=info msg="StartContainer for \"bf8e4be9c0d775f16903916684e99106fe0f2f892dd49fa91e3b14631eaaa17f\" returns successfully" Nov 1 00:46:09.704721 systemd[1]: run-netns-cni\x2d2aabc2dd\x2d276e\x2df302\x2db440\x2def0eac348ac0.mount: Deactivated successfully. Nov 1 00:46:09.834414 systemd-networkd[1460]: cali4ca3dc24906: Gained IPv6LL Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.848000 audit: BPF prog-id=190 op=LOAD Nov 1 00:46:09.848000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeeb1944f0 a2=94 a3=1 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.770 [INFO][4689] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.771 [INFO][4689] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" iface="eth0" netns="/var/run/netns/cni-4de9f394-e729-f1f2-9735-6a85d9fee62a" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.771 [INFO][4689] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" iface="eth0" netns="/var/run/netns/cni-4de9f394-e729-f1f2-9735-6a85d9fee62a" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.771 [INFO][4689] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" iface="eth0" netns="/var/run/netns/cni-4de9f394-e729-f1f2-9735-6a85d9fee62a" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.771 [INFO][4689] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.771 [INFO][4689] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.825 [INFO][4696] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.826 [INFO][4696] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.830 [INFO][4696] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.839 [WARNING][4696] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.839 [INFO][4696] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.841 [INFO][4696] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:09.850233 env[1736]: 2025-11-01 00:46:09.844 [INFO][4689] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:09.848000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.854000 audit: BPF prog-id=190 op=UNLOAD Nov 1 00:46:09.854000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.854000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffeeb1945c0 a2=50 a3=7ffeeb1946a0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.854000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.857401 systemd[1]: run-netns-cni\x2d4de9f394\x2de729\x2df1f2\x2d9735\x2d6a85d9fee62a.mount: Deactivated successfully. Nov 1 00:46:09.859544 env[1736]: time="2025-11-01T00:46:09.859485588Z" level=info msg="TearDown network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\" successfully" Nov 1 00:46:09.859799 env[1736]: time="2025-11-01T00:46:09.859725421Z" level=info msg="StopPodSandbox for \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\" returns successfully" Nov 1 00:46:09.870402 env[1736]: time="2025-11-01T00:46:09.870352732Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5456df96b8-5zpgr,Uid:356f7291-d15f-418b-af8c-74797b886c7a,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:46:09.873000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.873000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeeb194500 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.873000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.875000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.875000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeeb194530 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.875000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.875000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.875000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeeb194440 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.875000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.875000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.875000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeeb194550 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.875000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.876000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.876000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeeb194530 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.876000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.876000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.876000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeeb194520 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.876000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.876000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.876000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeeb194550 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.876000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.876000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.876000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeeb194530 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.876000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.876000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.876000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeeb194550 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.876000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeeb194520 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.877000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeeb194590 a2=28 a3=0 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.877000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffeeb194340 a2=50 a3=1 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.877000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.877000 audit: BPF prog-id=191 op=LOAD Nov 1 00:46:09.877000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffeeb194340 a2=94 a3=5 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.877000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.878000 audit: BPF prog-id=191 op=UNLOAD Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffeeb1943f0 a2=50 a3=1 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffeeb194510 a2=4 a3=38 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { confidentiality } for pid=4663 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:46:09.878000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeeb194560 a2=94 a3=6 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.878000 audit[4663]: AVC avc: denied { confidentiality } for pid=4663 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:46:09.878000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeeb193d10 a2=94 a3=88 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.878000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { perfmon } for pid=4663 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { confidentiality } for pid=4663 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:46:09.879000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeeb193d10 a2=94 a3=88 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeeb195740 a2=10 a3=f8f00800 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeeb1955e0 a2=10 a3=3 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeeb195580 a2=10 a3=3 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.879000 audit[4663]: AVC avc: denied { bpf } for pid=4663 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:09.879000 audit[4663]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeeb195580 a2=10 a3=7 items=0 ppid=4146 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:09.879000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:46:09.891000 audit: BPF prog-id=182 op=UNLOAD Nov 1 00:46:09.900940 systemd-networkd[1460]: calia3600f94340: Gained IPv6LL Nov 1 00:46:10.035378 kubelet[2626]: E1101 00:46:10.035332 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:46:10.037317 kubelet[2626]: E1101 00:46:10.037269 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:46:10.044724 kubelet[2626]: I1101 00:46:10.043864 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-66bc5c9577-2mpph" podStartSLOduration=43.043843657 podStartE2EDuration="43.043843657s" podCreationTimestamp="2025-11-01 00:45:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:46:10.04353986 +0000 UTC m=+48.629522857" watchObservedRunningTime="2025-11-01 00:46:10.043843657 +0000 UTC m=+48.629826654" Nov 1 00:46:10.121729 kubelet[2626]: I1101 00:46:10.121256 2626 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-66bc5c9577-2xnzk" podStartSLOduration=43.121236075 podStartE2EDuration="43.121236075s" podCreationTimestamp="2025-11-01 00:45:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:46:10.097221412 +0000 UTC m=+48.683204408" watchObservedRunningTime="2025-11-01 00:46:10.121236075 +0000 UTC m=+48.707219070" Nov 1 00:46:10.157886 systemd-networkd[1460]: cali01338d741cb: Link UP Nov 1 00:46:10.163835 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali01338d741cb: link becomes ready Nov 1 00:46:10.163487 systemd-networkd[1460]: cali01338d741cb: Gained carrier Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:09.965 [INFO][4705] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0 calico-apiserver-5456df96b8- calico-apiserver 356f7291-d15f-418b-af8c-74797b886c7a 969 0 2025-11-01 00:45:39 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5456df96b8 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-16-197 calico-apiserver-5456df96b8-5zpgr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali01338d741cb [] [] }} ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-5zpgr" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:09.965 [INFO][4705] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-5zpgr" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.056 [INFO][4728] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" HandleID="k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.058 [INFO][4728] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" HandleID="k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d59b0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-16-197", "pod":"calico-apiserver-5456df96b8-5zpgr", "timestamp":"2025-11-01 00:46:10.056581468 +0000 UTC"}, Hostname:"ip-172-31-16-197", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.058 [INFO][4728] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.058 [INFO][4728] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.058 [INFO][4728] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-197' Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.082 [INFO][4728] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.089 [INFO][4728] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.103 [INFO][4728] ipam/ipam.go 511: Trying affinity for 192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.109 [INFO][4728] ipam/ipam.go 158: Attempting to load block cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.113 [INFO][4728] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.113 [INFO][4728] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.71.192/26 handle="k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.117 [INFO][4728] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956 Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.135 [INFO][4728] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.71.192/26 handle="k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.150 [INFO][4728] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.71.198/26] block=192.168.71.192/26 handle="k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.150 [INFO][4728] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.71.198/26] handle="k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" host="ip-172-31-16-197" Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.151 [INFO][4728] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:10.189035 env[1736]: 2025-11-01 00:46:10.151 [INFO][4728] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.71.198/26] IPv6=[] ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" HandleID="k8s-pod-network.d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:10.190297 env[1736]: 2025-11-01 00:46:10.154 [INFO][4705] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-5zpgr" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0", GenerateName:"calico-apiserver-5456df96b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"356f7291-d15f-418b-af8c-74797b886c7a", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5456df96b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"", Pod:"calico-apiserver-5456df96b8-5zpgr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.71.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali01338d741cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:10.190297 env[1736]: 2025-11-01 00:46:10.154 [INFO][4705] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.71.198/32] ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-5zpgr" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:10.190297 env[1736]: 2025-11-01 00:46:10.154 [INFO][4705] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali01338d741cb ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-5zpgr" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:10.190297 env[1736]: 2025-11-01 00:46:10.164 [INFO][4705] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-5zpgr" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:10.190297 env[1736]: 2025-11-01 00:46:10.165 [INFO][4705] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-5zpgr" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0", GenerateName:"calico-apiserver-5456df96b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"356f7291-d15f-418b-af8c-74797b886c7a", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5456df96b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956", Pod:"calico-apiserver-5456df96b8-5zpgr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.71.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali01338d741cb", MAC:"c6:23:8e:91:c8:4b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:10.190297 env[1736]: 2025-11-01 00:46:10.183 [INFO][4705] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-5zpgr" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:10.209360 env[1736]: time="2025-11-01T00:46:10.209179864Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:46:10.209360 env[1736]: time="2025-11-01T00:46:10.209233281Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:46:10.209360 env[1736]: time="2025-11-01T00:46:10.209249015Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:46:10.209659 env[1736]: time="2025-11-01T00:46:10.209467787Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956 pid=4767 runtime=io.containerd.runc.v2 Nov 1 00:46:10.244283 systemd[1]: Started cri-containerd-d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956.scope. Nov 1 00:46:10.270000 audit[4748]: NETFILTER_CFG table=nat:105 family=2 entries=15 op=nft_register_chain pid=4748 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:46:10.270000 audit[4748]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffd9286fd80 a2=0 a3=7ffd9286fd6c items=0 ppid=4146 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.270000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:46:10.283000 audit[4778]: NETFILTER_CFG table=mangle:106 family=2 entries=16 op=nft_register_chain pid=4778 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:46:10.283000 audit[4778]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffd98b95db0 a2=0 a3=7ffd98b95d9c items=0 ppid=4146 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.283000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:46:10.294000 audit[4759]: NETFILTER_CFG table=raw:107 family=2 entries=21 op=nft_register_chain pid=4759 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:46:10.294000 audit[4759]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffd93df8050 a2=0 a3=7ffd93df803c items=0 ppid=4146 pid=4759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.294000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit: BPF prog-id=192 op=LOAD Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4767 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439616336656336363136353535666565376533373361643538303631 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=4767 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439616336656336363136353535666565376533373361643538303631 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.303000 audit: BPF prog-id=193 op=LOAD Nov 1 00:46:10.303000 audit[4779]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002e2ed0 items=0 ppid=4767 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439616336656336363136353535666565376533373361643538303631 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit: BPF prog-id=194 op=LOAD Nov 1 00:46:10.304000 audit[4779]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002e2f18 items=0 ppid=4767 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439616336656336363136353535666565376533373361643538303631 Nov 1 00:46:10.304000 audit: BPF prog-id=194 op=UNLOAD Nov 1 00:46:10.304000 audit: BPF prog-id=193 op=UNLOAD Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:10.304000 audit: BPF prog-id=195 op=LOAD Nov 1 00:46:10.304000 audit[4779]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002e3328 items=0 ppid=4767 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439616336656336363136353535666565376533373361643538303631 Nov 1 00:46:10.300000 audit[4777]: NETFILTER_CFG table=filter:108 family=2 entries=216 op=nft_register_chain pid=4777 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:46:10.300000 audit[4777]: SYSCALL arch=c000003e syscall=46 success=yes exit=126792 a0=3 a1=7ffdb6097f60 a2=0 a3=7ffdb6097f4c items=0 ppid=4146 pid=4777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.300000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:46:10.374759 env[1736]: time="2025-11-01T00:46:10.374635641Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5456df96b8-5zpgr,Uid:356f7291-d15f-418b-af8c-74797b886c7a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956\"" Nov 1 00:46:10.380506 env[1736]: time="2025-11-01T00:46:10.380469755Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:46:10.393000 audit[4817]: NETFILTER_CFG table=filter:109 family=2 entries=20 op=nft_register_rule pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:10.393000 audit[4817]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffdd01f31f0 a2=0 a3=7ffdd01f31dc items=0 ppid=2914 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.393000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:10.399000 audit[4817]: NETFILTER_CFG table=nat:110 family=2 entries=14 op=nft_register_rule pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:10.399000 audit[4817]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffdd01f31f0 a2=0 a3=0 items=0 ppid=2914 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.399000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:10.411533 systemd-networkd[1460]: cali61c2bfb3dc9: Gained IPv6LL Nov 1 00:46:10.419000 audit[4819]: NETFILTER_CFG table=filter:111 family=2 entries=66 op=nft_register_chain pid=4819 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:46:10.419000 audit[4819]: SYSCALL arch=c000003e syscall=46 success=yes exit=32960 a0=3 a1=7fff2cc799c0 a2=0 a3=7fff2cc799ac items=0 ppid=4146 pid=4819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:10.419000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:46:10.639553 env[1736]: time="2025-11-01T00:46:10.639449705Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:10.641895 env[1736]: time="2025-11-01T00:46:10.641836715Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:46:10.642666 kubelet[2626]: E1101 00:46:10.642266 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:10.642666 kubelet[2626]: E1101 00:46:10.642312 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:10.642666 kubelet[2626]: E1101 00:46:10.642387 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-apiserver start failed in pod calico-apiserver-5456df96b8-5zpgr_calico-apiserver(356f7291-d15f-418b-af8c-74797b886c7a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:10.642666 kubelet[2626]: E1101 00:46:10.642418 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:46:10.665988 systemd-networkd[1460]: calic9137587fbf: Gained IPv6LL Nov 1 00:46:10.668523 env[1736]: time="2025-11-01T00:46:10.668491183Z" level=info msg="StopPodSandbox for \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\"" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.745 [INFO][4829] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.745 [INFO][4829] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" iface="eth0" netns="/var/run/netns/cni-667413d3-dba6-182a-a30e-7fdfb015e28a" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.745 [INFO][4829] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" iface="eth0" netns="/var/run/netns/cni-667413d3-dba6-182a-a30e-7fdfb015e28a" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.745 [INFO][4829] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" iface="eth0" netns="/var/run/netns/cni-667413d3-dba6-182a-a30e-7fdfb015e28a" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.746 [INFO][4829] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.746 [INFO][4829] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.770 [INFO][4836] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.770 [INFO][4836] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.771 [INFO][4836] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.780 [WARNING][4836] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.780 [INFO][4836] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.783 [INFO][4836] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:10.792769 env[1736]: 2025-11-01 00:46:10.788 [INFO][4829] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:10.800796 env[1736]: time="2025-11-01T00:46:10.797077724Z" level=info msg="TearDown network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\" successfully" Nov 1 00:46:10.800796 env[1736]: time="2025-11-01T00:46:10.797129407Z" level=info msg="StopPodSandbox for \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\" returns successfully" Nov 1 00:46:10.801191 systemd[1]: run-netns-cni\x2d667413d3\x2ddba6\x2d182a\x2da30e\x2d7fdfb015e28a.mount: Deactivated successfully. Nov 1 00:46:10.803891 env[1736]: time="2025-11-01T00:46:10.803853176Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k2xb7,Uid:a9ee1226-e5f0-4660-960b-3308581cda89,Namespace:calico-system,Attempt:1,}" Nov 1 00:46:10.976111 systemd-networkd[1460]: cali0a2eacd33cf: Link UP Nov 1 00:46:10.982449 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:46:10.982562 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0a2eacd33cf: link becomes ready Nov 1 00:46:10.982812 systemd-networkd[1460]: cali0a2eacd33cf: Gained carrier Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.875 [INFO][4843] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0 csi-node-driver- calico-system a9ee1226-e5f0-4660-960b-3308581cda89 997 0 2025-11-01 00:45:45 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:9d99788f7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-16-197 csi-node-driver-k2xb7 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali0a2eacd33cf [] [] }} ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Namespace="calico-system" Pod="csi-node-driver-k2xb7" WorkloadEndpoint="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.875 [INFO][4843] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Namespace="calico-system" Pod="csi-node-driver-k2xb7" WorkloadEndpoint="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.909 [INFO][4855] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" HandleID="k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.910 [INFO][4855] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" HandleID="k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9010), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-16-197", "pod":"csi-node-driver-k2xb7", "timestamp":"2025-11-01 00:46:10.909825786 +0000 UTC"}, Hostname:"ip-172-31-16-197", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.910 [INFO][4855] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.910 [INFO][4855] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.910 [INFO][4855] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-197' Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.920 [INFO][4855] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.933 [INFO][4855] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.940 [INFO][4855] ipam/ipam.go 511: Trying affinity for 192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.943 [INFO][4855] ipam/ipam.go 158: Attempting to load block cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.947 [INFO][4855] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.947 [INFO][4855] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.71.192/26 handle="k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.949 [INFO][4855] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734 Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.955 [INFO][4855] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.71.192/26 handle="k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.964 [INFO][4855] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.71.199/26] block=192.168.71.192/26 handle="k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.964 [INFO][4855] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.71.199/26] handle="k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" host="ip-172-31-16-197" Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.964 [INFO][4855] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:11.010522 env[1736]: 2025-11-01 00:46:10.964 [INFO][4855] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.71.199/26] IPv6=[] ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" HandleID="k8s-pod-network.688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:11.011515 env[1736]: 2025-11-01 00:46:10.966 [INFO][4843] cni-plugin/k8s.go 418: Populated endpoint ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Namespace="calico-system" Pod="csi-node-driver-k2xb7" WorkloadEndpoint="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a9ee1226-e5f0-4660-960b-3308581cda89", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"9d99788f7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"", Pod:"csi-node-driver-k2xb7", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.71.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0a2eacd33cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:11.011515 env[1736]: 2025-11-01 00:46:10.967 [INFO][4843] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.71.199/32] ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Namespace="calico-system" Pod="csi-node-driver-k2xb7" WorkloadEndpoint="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:11.011515 env[1736]: 2025-11-01 00:46:10.967 [INFO][4843] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0a2eacd33cf ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Namespace="calico-system" Pod="csi-node-driver-k2xb7" WorkloadEndpoint="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:11.011515 env[1736]: 2025-11-01 00:46:10.983 [INFO][4843] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Namespace="calico-system" Pod="csi-node-driver-k2xb7" WorkloadEndpoint="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:11.011515 env[1736]: 2025-11-01 00:46:10.986 [INFO][4843] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Namespace="calico-system" Pod="csi-node-driver-k2xb7" WorkloadEndpoint="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a9ee1226-e5f0-4660-960b-3308581cda89", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"9d99788f7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734", Pod:"csi-node-driver-k2xb7", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.71.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0a2eacd33cf", MAC:"ba:e1:16:6c:84:b7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:11.011515 env[1736]: 2025-11-01 00:46:11.008 [INFO][4843] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734" Namespace="calico-system" Pod="csi-node-driver-k2xb7" WorkloadEndpoint="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:11.030763 env[1736]: time="2025-11-01T00:46:11.030619601Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:46:11.031111 env[1736]: time="2025-11-01T00:46:11.031046306Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:46:11.031330 env[1736]: time="2025-11-01T00:46:11.031274486Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:46:11.032274 env[1736]: time="2025-11-01T00:46:11.032169731Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734 pid=4874 runtime=io.containerd.runc.v2 Nov 1 00:46:11.047472 kubelet[2626]: E1101 00:46:11.047408 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:46:11.047980 kubelet[2626]: E1101 00:46:11.047546 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:46:11.091537 systemd[1]: Started cri-containerd-688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734.scope. Nov 1 00:46:11.098000 audit[4895]: NETFILTER_CFG table=filter:112 family=2 entries=62 op=nft_register_chain pid=4895 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:46:11.098000 audit[4895]: SYSCALL arch=c000003e syscall=46 success=yes exit=28368 a0=3 a1=7ffe670bd310 a2=0 a3=7ffe670bd2fc items=0 ppid=4146 pid=4895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:11.098000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.138000 audit: BPF prog-id=196 op=LOAD Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4874 pid=4887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:11.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638383337376361306334343266386561643432623938373362356636 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4874 pid=4887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:11.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638383337376361306334343266386561643432623938373362356636 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit: BPF prog-id=197 op=LOAD Nov 1 00:46:11.139000 audit[4887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002af2b0 items=0 ppid=4874 pid=4887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:11.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638383337376361306334343266386561643432623938373362356636 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit: BPF prog-id=198 op=LOAD Nov 1 00:46:11.139000 audit[4887]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002af2f8 items=0 ppid=4874 pid=4887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:11.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638383337376361306334343266386561643432623938373362356636 Nov 1 00:46:11.139000 audit: BPF prog-id=198 op=UNLOAD Nov 1 00:46:11.139000 audit: BPF prog-id=197 op=UNLOAD Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { perfmon } for pid=4887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit[4887]: AVC avc: denied { bpf } for pid=4887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:11.139000 audit: BPF prog-id=199 op=LOAD Nov 1 00:46:11.139000 audit[4887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002af708 items=0 ppid=4874 pid=4887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:11.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638383337376361306334343266386561643432623938373362356636 Nov 1 00:46:11.181373 env[1736]: time="2025-11-01T00:46:11.181324474Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k2xb7,Uid:a9ee1226-e5f0-4660-960b-3308581cda89,Namespace:calico-system,Attempt:1,} returns sandbox id \"688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734\"" Nov 1 00:46:11.183945 env[1736]: time="2025-11-01T00:46:11.183905114Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:46:11.369946 systemd-networkd[1460]: cali01338d741cb: Gained IPv6LL Nov 1 00:46:11.370584 systemd-networkd[1460]: vxlan.calico: Gained IPv6LL Nov 1 00:46:11.440000 audit[4911]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=4911 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:11.440000 audit[4911]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe14378210 a2=0 a3=7ffe143781fc items=0 ppid=2914 pid=4911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:11.440000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:11.446000 audit[4911]: NETFILTER_CFG table=nat:114 family=2 entries=14 op=nft_register_rule pid=4911 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:11.446000 audit[4911]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffe14378210 a2=0 a3=0 items=0 ppid=2914 pid=4911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:11.446000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:11.452792 env[1736]: time="2025-11-01T00:46:11.452720906Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:11.455024 env[1736]: time="2025-11-01T00:46:11.454947733Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:46:11.456045 kubelet[2626]: E1101 00:46:11.455302 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:46:11.456045 kubelet[2626]: E1101 00:46:11.455347 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:46:11.456045 kubelet[2626]: E1101 00:46:11.455432 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-csi start failed in pod csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:11.457277 env[1736]: time="2025-11-01T00:46:11.457226351Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:46:11.669713 env[1736]: time="2025-11-01T00:46:11.669052760Z" level=info msg="StopPodSandbox for \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\"" Nov 1 00:46:11.721622 env[1736]: time="2025-11-01T00:46:11.721579725Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:11.724421 env[1736]: time="2025-11-01T00:46:11.724350732Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:46:11.724998 kubelet[2626]: E1101 00:46:11.724946 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:46:11.725098 kubelet[2626]: E1101 00:46:11.725008 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:46:11.725142 kubelet[2626]: E1101 00:46:11.725102 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container csi-node-driver-registrar start failed in pod csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:11.725275 kubelet[2626]: E1101 00:46:11.725239 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.738 [INFO][4921] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.742 [INFO][4921] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" iface="eth0" netns="/var/run/netns/cni-68832da6-949c-9c86-1462-8e8cc65de835" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.742 [INFO][4921] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" iface="eth0" netns="/var/run/netns/cni-68832da6-949c-9c86-1462-8e8cc65de835" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.742 [INFO][4921] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" iface="eth0" netns="/var/run/netns/cni-68832da6-949c-9c86-1462-8e8cc65de835" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.742 [INFO][4921] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.742 [INFO][4921] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.775 [INFO][4929] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.776 [INFO][4929] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.776 [INFO][4929] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.785 [WARNING][4929] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.785 [INFO][4929] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.788 [INFO][4929] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:11.793095 env[1736]: 2025-11-01 00:46:11.790 [INFO][4921] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:11.800009 env[1736]: time="2025-11-01T00:46:11.799928383Z" level=info msg="TearDown network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\" successfully" Nov 1 00:46:11.800345 env[1736]: time="2025-11-01T00:46:11.800315359Z" level=info msg="StopPodSandbox for \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\" returns successfully" Nov 1 00:46:11.801523 systemd[1]: run-netns-cni\x2d68832da6\x2d949c\x2d9c86\x2d1462\x2d8e8cc65de835.mount: Deactivated successfully. Nov 1 00:46:11.805608 env[1736]: time="2025-11-01T00:46:11.805564116Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5456df96b8-f9wrw,Uid:703a5252-c145-457e-b648-c986dff90c0c,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:46:11.974323 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:46:11.974456 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5afd685ec4e: link becomes ready Nov 1 00:46:11.971293 systemd-networkd[1460]: cali5afd685ec4e: Link UP Nov 1 00:46:11.975009 systemd-networkd[1460]: cali5afd685ec4e: Gained carrier Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.879 [INFO][4936] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0 calico-apiserver-5456df96b8- calico-apiserver 703a5252-c145-457e-b648-c986dff90c0c 1025 0 2025-11-01 00:45:39 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5456df96b8 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-16-197 calico-apiserver-5456df96b8-f9wrw eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali5afd685ec4e [] [] }} ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-f9wrw" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.879 [INFO][4936] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-f9wrw" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.912 [INFO][4949] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" HandleID="k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.912 [INFO][4949] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" HandleID="k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-16-197", "pod":"calico-apiserver-5456df96b8-f9wrw", "timestamp":"2025-11-01 00:46:11.91269709 +0000 UTC"}, Hostname:"ip-172-31-16-197", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.912 [INFO][4949] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.913 [INFO][4949] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.913 [INFO][4949] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-197' Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.921 [INFO][4949] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.927 [INFO][4949] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.933 [INFO][4949] ipam/ipam.go 511: Trying affinity for 192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.936 [INFO][4949] ipam/ipam.go 158: Attempting to load block cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.939 [INFO][4949] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.71.192/26 host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.939 [INFO][4949] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.71.192/26 handle="k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.943 [INFO][4949] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126 Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.949 [INFO][4949] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.71.192/26 handle="k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.959 [INFO][4949] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.71.200/26] block=192.168.71.192/26 handle="k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.959 [INFO][4949] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.71.200/26] handle="k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" host="ip-172-31-16-197" Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.960 [INFO][4949] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:12.008014 env[1736]: 2025-11-01 00:46:11.960 [INFO][4949] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.71.200/26] IPv6=[] ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" HandleID="k8s-pod-network.2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:12.009011 env[1736]: 2025-11-01 00:46:11.963 [INFO][4936] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-f9wrw" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0", GenerateName:"calico-apiserver-5456df96b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"703a5252-c145-457e-b648-c986dff90c0c", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5456df96b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"", Pod:"calico-apiserver-5456df96b8-f9wrw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.71.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5afd685ec4e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:12.009011 env[1736]: 2025-11-01 00:46:11.964 [INFO][4936] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.71.200/32] ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-f9wrw" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:12.009011 env[1736]: 2025-11-01 00:46:11.964 [INFO][4936] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5afd685ec4e ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-f9wrw" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:12.009011 env[1736]: 2025-11-01 00:46:11.971 [INFO][4936] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-f9wrw" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:12.009011 env[1736]: 2025-11-01 00:46:11.985 [INFO][4936] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-f9wrw" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0", GenerateName:"calico-apiserver-5456df96b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"703a5252-c145-457e-b648-c986dff90c0c", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5456df96b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126", Pod:"calico-apiserver-5456df96b8-f9wrw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.71.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5afd685ec4e", MAC:"1e:cf:1d:bb:9d:43", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:12.009011 env[1736]: 2025-11-01 00:46:12.005 [INFO][4936] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126" Namespace="calico-apiserver" Pod="calico-apiserver-5456df96b8-f9wrw" WorkloadEndpoint="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:12.026790 env[1736]: time="2025-11-01T00:46:12.026677812Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:46:12.027036 env[1736]: time="2025-11-01T00:46:12.026971436Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:46:12.027308 env[1736]: time="2025-11-01T00:46:12.026994776Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:46:12.027308 env[1736]: time="2025-11-01T00:46:12.027175430Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126 pid=4969 runtime=io.containerd.runc.v2 Nov 1 00:46:12.055919 kubelet[2626]: E1101 00:46:12.055873 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:46:12.056723 kubelet[2626]: E1101 00:46:12.056675 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:46:12.069304 systemd[1]: Started cri-containerd-2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126.scope. Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.129000 audit: BPF prog-id=200 op=LOAD Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4969 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:12.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266366232653333323736343162663039353663646234373966616431 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4969 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:12.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266366232653333323736343162663039353663646234373966616431 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit: BPF prog-id=201 op=LOAD Nov 1 00:46:12.130000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000335d10 items=0 ppid=4969 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:12.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266366232653333323736343162663039353663646234373966616431 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.130000 audit: BPF prog-id=202 op=LOAD Nov 1 00:46:12.130000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000335d58 items=0 ppid=4969 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:12.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266366232653333323736343162663039353663646234373966616431 Nov 1 00:46:12.131000 audit: BPF prog-id=202 op=UNLOAD Nov 1 00:46:12.131000 audit: BPF prog-id=201 op=UNLOAD Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:46:12.131000 audit: BPF prog-id=203 op=LOAD Nov 1 00:46:12.131000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003b6168 items=0 ppid=4969 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:12.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266366232653333323736343162663039353663646234373966616431 Nov 1 00:46:12.151000 audit[4996]: NETFILTER_CFG table=filter:115 family=2 entries=57 op=nft_register_chain pid=4996 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:46:12.151000 audit[4996]: SYSCALL arch=c000003e syscall=46 success=yes exit=27812 a0=3 a1=7ffd26f16fa0 a2=0 a3=7ffd26f16f8c items=0 ppid=4146 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:12.151000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:46:12.192461 env[1736]: time="2025-11-01T00:46:12.192413883Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5456df96b8-f9wrw,Uid:703a5252-c145-457e-b648-c986dff90c0c,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126\"" Nov 1 00:46:12.195122 env[1736]: time="2025-11-01T00:46:12.195085223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:46:12.452096 env[1736]: time="2025-11-01T00:46:12.451949325Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:12.454153 env[1736]: time="2025-11-01T00:46:12.454084401Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:46:12.455137 kubelet[2626]: E1101 00:46:12.455072 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:12.455307 kubelet[2626]: E1101 00:46:12.455285 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:12.456249 kubelet[2626]: E1101 00:46:12.456204 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-apiserver start failed in pod calico-apiserver-5456df96b8-f9wrw_calico-apiserver(703a5252-c145-457e-b648-c986dff90c0c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:12.456474 kubelet[2626]: E1101 00:46:12.456430 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:46:12.801629 systemd[1]: run-containerd-runc-k8s.io-2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126-runc.dcLzHy.mount: Deactivated successfully. Nov 1 00:46:12.958808 kernel: kauditd_printk_skb: 1144 callbacks suppressed Nov 1 00:46:12.959121 kernel: audit: type=1400 audit(1761957972.956:1323): avc: denied { getattr } for pid=4528 comm="coredns" path="cgroup:[4026532301]" dev="nsfs" ino=4026532301 scontext=system_u:system_r:svirt_lxc_net_t:s0:c506,c832 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:46:12.956000 audit[4528]: AVC avc: denied { getattr } for pid=4528 comm="coredns" path="cgroup:[4026532301]" dev="nsfs" ino=4026532301 scontext=system_u:system_r:svirt_lxc_net_t:s0:c506,c832 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:46:12.956000 audit[4528]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000134e28 a2=c000569148 a3=0 items=0 ppid=4417 pid=4528 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c506,c832 key=(null) Nov 1 00:46:12.967596 kernel: audit: type=1300 audit(1761957972.956:1323): arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000134e28 a2=c000569148 a3=0 items=0 ppid=4417 pid=4528 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c506,c832 key=(null) Nov 1 00:46:12.956000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:46:12.959000 audit[4668]: AVC avc: denied { getattr } for pid=4668 comm="coredns" path="cgroup:[4026532726]" dev="nsfs" ino=4026532726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c670,c966 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:46:12.976491 kernel: audit: type=1327 audit(1761957972.956:1323): proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:46:12.976616 kernel: audit: type=1400 audit(1761957972.959:1324): avc: denied { getattr } for pid=4668 comm="coredns" path="cgroup:[4026532726]" dev="nsfs" ino=4026532726 scontext=system_u:system_r:svirt_lxc_net_t:s0:c670,c966 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:46:12.976659 kernel: audit: type=1300 audit(1761957972.959:1324): arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000056810 a2=c0004b3558 a3=0 items=0 ppid=4596 pid=4668 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c670,c966 key=(null) Nov 1 00:46:12.959000 audit[4668]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000056810 a2=c0004b3558 a3=0 items=0 ppid=4596 pid=4668 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c670,c966 key=(null) Nov 1 00:46:12.959000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:46:12.988558 kernel: audit: type=1327 audit(1761957972.959:1324): proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:46:13.033955 systemd-networkd[1460]: cali0a2eacd33cf: Gained IPv6LL Nov 1 00:46:13.052106 kubelet[2626]: E1101 00:46:13.051901 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:46:13.053371 kubelet[2626]: E1101 00:46:13.053306 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:46:13.098423 systemd-networkd[1460]: cali5afd685ec4e: Gained IPv6LL Nov 1 00:46:13.107000 audit[5007]: NETFILTER_CFG table=filter:116 family=2 entries=20 op=nft_register_rule pid=5007 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:13.107000 audit[5007]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcb108a030 a2=0 a3=7ffcb108a01c items=0 ppid=2914 pid=5007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:13.117391 kernel: audit: type=1325 audit(1761957973.107:1325): table=filter:116 family=2 entries=20 op=nft_register_rule pid=5007 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:13.117525 kernel: audit: type=1300 audit(1761957973.107:1325): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcb108a030 a2=0 a3=7ffcb108a01c items=0 ppid=2914 pid=5007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:13.107000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:13.120028 kernel: audit: type=1327 audit(1761957973.107:1325): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:13.120000 audit[5007]: NETFILTER_CFG table=nat:117 family=2 entries=14 op=nft_register_rule pid=5007 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:13.120000 audit[5007]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffcb108a030 a2=0 a3=0 items=0 ppid=2914 pid=5007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:13.120000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:13.124790 kernel: audit: type=1325 audit(1761957973.120:1326): table=nat:117 family=2 entries=14 op=nft_register_rule pid=5007 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:14.056201 kubelet[2626]: E1101 00:46:14.056157 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:46:15.002000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:15.002000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002e694a0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:46:15.002000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:15.002000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:15.002000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0037795a0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:46:15.002000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:17.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.197:22-147.75.109.163:49578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:17.011352 systemd[1]: Started sshd@7-172.31.16.197:22-147.75.109.163:49578.service. Nov 1 00:46:17.066000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:17.066000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0141426f0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:46:17.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:46:17.065000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521055 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:17.065000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c014b96900 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:46:17.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:46:17.068000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:17.068000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c014b96930 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:46:17.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:46:17.076000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:17.076000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c005a64ac0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:46:17.076000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:46:17.079000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:17.079000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c005a64c60 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:46:17.079000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:46:17.081000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521061 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:17.081000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c014142780 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:46:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:46:17.235000 audit[5021]: USER_ACCT pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:17.237641 sshd[5021]: Accepted publickey for core from 147.75.109.163 port 49578 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:17.237000 audit[5021]: CRED_ACQ pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:17.237000 audit[5021]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccf06b060 a2=3 a3=0 items=0 ppid=1 pid=5021 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:17.237000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:17.240505 sshd[5021]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:17.251159 systemd-logind[1726]: New session 8 of user core. Nov 1 00:46:17.252323 systemd[1]: Started session-8.scope. Nov 1 00:46:17.259000 audit[5021]: USER_START pid=5021 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:17.260000 audit[5026]: CRED_ACQ pid=5026 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:18.191673 sshd[5021]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:18.192000 audit[5021]: USER_END pid=5021 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:18.199456 kernel: kauditd_printk_skb: 34 callbacks suppressed Nov 1 00:46:18.199587 kernel: audit: type=1106 audit(1761957978.192:1341): pid=5021 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:18.194000 audit[5021]: CRED_DISP pid=5021 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:18.208710 kernel: audit: type=1104 audit(1761957978.194:1342): pid=5021 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:18.208791 kernel: audit: type=1131 audit(1761957978.203:1343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.197:22-147.75.109.163:49578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:18.203000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.197:22-147.75.109.163:49578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:18.203637 systemd[1]: sshd@7-172.31.16.197:22-147.75.109.163:49578.service: Deactivated successfully. Nov 1 00:46:18.204525 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:46:18.208131 systemd-logind[1726]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:46:18.209118 systemd-logind[1726]: Removed session 8. Nov 1 00:46:21.669387 env[1736]: time="2025-11-01T00:46:21.669339486Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:46:21.721800 env[1736]: time="2025-11-01T00:46:21.721745932Z" level=info msg="StopPodSandbox for \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\"" Nov 1 00:46:21.909028 env[1736]: time="2025-11-01T00:46:21.908983778Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:21.911199 env[1736]: time="2025-11-01T00:46:21.911143861Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:46:21.912279 kubelet[2626]: E1101 00:46:21.911555 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:46:21.912279 kubelet[2626]: E1101 00:46:21.911606 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:46:21.912279 kubelet[2626]: E1101 00:46:21.911676 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container whisker start failed in pod whisker-5694757584-dtbgp_calico-system(da0b54df-6c7c-4295-a916-3e7023bdb682): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:21.915006 env[1736]: time="2025-11-01T00:46:21.914973996Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.878 [WARNING][5052] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0", GenerateName:"coredns-66bc5c9577-", Namespace:"kube-system", SelfLink:"", UID:"26320c11-fd44-44ad-b136-f0d68f311c28", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"66bc5c9577", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c", Pod:"coredns-66bc5c9577-2mpph", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.71.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia3600f94340", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"liveness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1f90, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"readiness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1ff5, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.879 [INFO][5052] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.879 [INFO][5052] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" iface="eth0" netns="" Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.879 [INFO][5052] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.879 [INFO][5052] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.918 [INFO][5059] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.918 [INFO][5059] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.918 [INFO][5059] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.931 [WARNING][5059] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.931 [INFO][5059] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.935 [INFO][5059] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:21.941956 env[1736]: 2025-11-01 00:46:21.938 [INFO][5052] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:21.941956 env[1736]: time="2025-11-01T00:46:21.941702083Z" level=info msg="TearDown network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\" successfully" Nov 1 00:46:21.941956 env[1736]: time="2025-11-01T00:46:21.941731852Z" level=info msg="StopPodSandbox for \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\" returns successfully" Nov 1 00:46:21.944702 env[1736]: time="2025-11-01T00:46:21.944666431Z" level=info msg="RemovePodSandbox for \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\"" Nov 1 00:46:21.944874 env[1736]: time="2025-11-01T00:46:21.944701689Z" level=info msg="Forcibly stopping sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\"" Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:21.985 [WARNING][5074] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0", GenerateName:"coredns-66bc5c9577-", Namespace:"kube-system", SelfLink:"", UID:"26320c11-fd44-44ad-b136-f0d68f311c28", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"66bc5c9577", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"5d14fdac114c88885d40f95613a715f7cbfe4869970b0da024cb2de6b0dec98c", Pod:"coredns-66bc5c9577-2mpph", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.71.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia3600f94340", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"liveness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1f90, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"readiness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1ff5, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:21.985 [INFO][5074] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:21.985 [INFO][5074] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" iface="eth0" netns="" Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:21.985 [INFO][5074] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:21.985 [INFO][5074] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:22.027 [INFO][5081] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:22.028 [INFO][5081] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:22.028 [INFO][5081] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:22.035 [WARNING][5081] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:22.035 [INFO][5081] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" HandleID="k8s-pod-network.24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2mpph-eth0" Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:22.037 [INFO][5081] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.044130 env[1736]: 2025-11-01 00:46:22.041 [INFO][5074] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959" Nov 1 00:46:22.044869 env[1736]: time="2025-11-01T00:46:22.044828961Z" level=info msg="TearDown network for sandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\" successfully" Nov 1 00:46:22.055947 env[1736]: time="2025-11-01T00:46:22.055722002Z" level=info msg="RemovePodSandbox \"24dc616c6bd5dbd4ef1f221f6775550ebc1667451fdc85acfe665a93bf493959\" returns successfully" Nov 1 00:46:22.057336 env[1736]: time="2025-11-01T00:46:22.057264584Z" level=info msg="StopPodSandbox for \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\"" Nov 1 00:46:22.114000 audit[5102]: NETFILTER_CFG table=filter:118 family=2 entries=17 op=nft_register_rule pid=5102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:22.114000 audit[5102]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffceeff7350 a2=0 a3=7ffceeff733c items=0 ppid=2914 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:22.125568 kernel: audit: type=1325 audit(1761957982.114:1344): table=filter:118 family=2 entries=17 op=nft_register_rule pid=5102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:22.125728 kernel: audit: type=1300 audit(1761957982.114:1344): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffceeff7350 a2=0 a3=7ffceeff733c items=0 ppid=2914 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:22.114000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:22.134784 kernel: audit: type=1327 audit(1761957982.114:1344): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:22.138000 audit[5102]: NETFILTER_CFG table=nat:119 family=2 entries=35 op=nft_register_chain pid=5102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:22.158069 kernel: audit: type=1325 audit(1761957982.138:1345): table=nat:119 family=2 entries=35 op=nft_register_chain pid=5102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:22.158207 kernel: audit: type=1300 audit(1761957982.138:1345): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffceeff7350 a2=0 a3=7ffceeff733c items=0 ppid=2914 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:22.138000 audit[5102]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffceeff7350 a2=0 a3=7ffceeff733c items=0 ppid=2914 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:22.138000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:22.164853 kernel: audit: type=1327 audit(1761957982.138:1345): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:22.165936 env[1736]: time="2025-11-01T00:46:22.165891277Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:22.168219 env[1736]: time="2025-11-01T00:46:22.168156697Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:46:22.169354 kubelet[2626]: E1101 00:46:22.168634 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:46:22.169354 kubelet[2626]: E1101 00:46:22.168705 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:46:22.169354 kubelet[2626]: E1101 00:46:22.168832 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container whisker-backend start failed in pod whisker-5694757584-dtbgp_calico-system(da0b54df-6c7c-4295-a916-3e7023bdb682): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:22.169560 kubelet[2626]: E1101 00:46:22.168891 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.170 [WARNING][5096] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0", GenerateName:"calico-apiserver-5456df96b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"703a5252-c145-457e-b648-c986dff90c0c", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5456df96b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126", Pod:"calico-apiserver-5456df96b8-f9wrw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.71.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5afd685ec4e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.171 [INFO][5096] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.171 [INFO][5096] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" iface="eth0" netns="" Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.171 [INFO][5096] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.171 [INFO][5096] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.204 [INFO][5106] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.204 [INFO][5106] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.205 [INFO][5106] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.212 [WARNING][5106] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.212 [INFO][5106] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.214 [INFO][5106] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.220493 env[1736]: 2025-11-01 00:46:22.216 [INFO][5096] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:22.221226 env[1736]: time="2025-11-01T00:46:22.220544734Z" level=info msg="TearDown network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\" successfully" Nov 1 00:46:22.221226 env[1736]: time="2025-11-01T00:46:22.220581251Z" level=info msg="StopPodSandbox for \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\" returns successfully" Nov 1 00:46:22.223339 env[1736]: time="2025-11-01T00:46:22.223299088Z" level=info msg="RemovePodSandbox for \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\"" Nov 1 00:46:22.223453 env[1736]: time="2025-11-01T00:46:22.223348081Z" level=info msg="Forcibly stopping sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\"" Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.281 [WARNING][5123] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0", GenerateName:"calico-apiserver-5456df96b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"703a5252-c145-457e-b648-c986dff90c0c", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5456df96b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"2f6b2e3327641bf0956cdb479fad10d87c54365b6a1e696c16d23a842f0e5126", Pod:"calico-apiserver-5456df96b8-f9wrw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.71.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5afd685ec4e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.281 [INFO][5123] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.281 [INFO][5123] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" iface="eth0" netns="" Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.281 [INFO][5123] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.281 [INFO][5123] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.306 [INFO][5130] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.306 [INFO][5130] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.306 [INFO][5130] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.314 [WARNING][5130] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.314 [INFO][5130] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" HandleID="k8s-pod-network.7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--f9wrw-eth0" Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.317 [INFO][5130] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.321538 env[1736]: 2025-11-01 00:46:22.319 [INFO][5123] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6" Nov 1 00:46:22.322355 env[1736]: time="2025-11-01T00:46:22.322312402Z" level=info msg="TearDown network for sandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\" successfully" Nov 1 00:46:22.329085 env[1736]: time="2025-11-01T00:46:22.329037109Z" level=info msg="RemovePodSandbox \"7a4a394b750d1572e1c7180918835af3ea61175b1e4bc9020fd52fe722fe37f6\" returns successfully" Nov 1 00:46:22.329550 env[1736]: time="2025-11-01T00:46:22.329519175Z" level=info msg="StopPodSandbox for \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\"" Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.373 [WARNING][5144] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0", GenerateName:"calico-apiserver-5456df96b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"356f7291-d15f-418b-af8c-74797b886c7a", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5456df96b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956", Pod:"calico-apiserver-5456df96b8-5zpgr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.71.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali01338d741cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.374 [INFO][5144] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.374 [INFO][5144] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" iface="eth0" netns="" Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.374 [INFO][5144] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.374 [INFO][5144] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.397 [INFO][5152] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.397 [INFO][5152] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.397 [INFO][5152] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.404 [WARNING][5152] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.404 [INFO][5152] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.406 [INFO][5152] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.410991 env[1736]: 2025-11-01 00:46:22.409 [INFO][5144] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:22.411622 env[1736]: time="2025-11-01T00:46:22.411586307Z" level=info msg="TearDown network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\" successfully" Nov 1 00:46:22.411716 env[1736]: time="2025-11-01T00:46:22.411683909Z" level=info msg="StopPodSandbox for \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\" returns successfully" Nov 1 00:46:22.412624 env[1736]: time="2025-11-01T00:46:22.412584163Z" level=info msg="RemovePodSandbox for \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\"" Nov 1 00:46:22.412725 env[1736]: time="2025-11-01T00:46:22.412622193Z" level=info msg="Forcibly stopping sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\"" Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.454 [WARNING][5166] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0", GenerateName:"calico-apiserver-5456df96b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"356f7291-d15f-418b-af8c-74797b886c7a", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5456df96b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"d9ac6ec6616555fee7e373ad580610023ceda6ae3754c896c91bafe69a9c0956", Pod:"calico-apiserver-5456df96b8-5zpgr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.71.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali01338d741cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.455 [INFO][5166] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.455 [INFO][5166] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" iface="eth0" netns="" Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.455 [INFO][5166] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.455 [INFO][5166] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.479 [INFO][5174] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.479 [INFO][5174] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.479 [INFO][5174] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.485 [WARNING][5174] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.485 [INFO][5174] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" HandleID="k8s-pod-network.05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Workload="ip--172--31--16--197-k8s-calico--apiserver--5456df96b8--5zpgr-eth0" Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.487 [INFO][5174] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.491722 env[1736]: 2025-11-01 00:46:22.489 [INFO][5166] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad" Nov 1 00:46:22.492804 env[1736]: time="2025-11-01T00:46:22.491685752Z" level=info msg="TearDown network for sandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\" successfully" Nov 1 00:46:22.498654 env[1736]: time="2025-11-01T00:46:22.498607510Z" level=info msg="RemovePodSandbox \"05bd9c0c7f51894d983688acbedd1520470071b5c1e8b19cbc322272fa7912ad\" returns successfully" Nov 1 00:46:22.499133 env[1736]: time="2025-11-01T00:46:22.499105645Z" level=info msg="StopPodSandbox for \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\"" Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.537 [WARNING][5188] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0", GenerateName:"goldmane-7c778bb748-", Namespace:"calico-system", SelfLink:"", UID:"b1382796-d43e-42cf-9f8e-009d999e587c", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7c778bb748", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002", Pod:"goldmane-7c778bb748-5czvc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.71.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic9137587fbf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.537 [INFO][5188] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.537 [INFO][5188] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" iface="eth0" netns="" Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.537 [INFO][5188] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.537 [INFO][5188] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.570 [INFO][5195] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.570 [INFO][5195] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.570 [INFO][5195] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.582 [WARNING][5195] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.582 [INFO][5195] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.584 [INFO][5195] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.588978 env[1736]: 2025-11-01 00:46:22.586 [INFO][5188] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:22.590186 env[1736]: time="2025-11-01T00:46:22.589013259Z" level=info msg="TearDown network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\" successfully" Nov 1 00:46:22.590186 env[1736]: time="2025-11-01T00:46:22.589049998Z" level=info msg="StopPodSandbox for \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\" returns successfully" Nov 1 00:46:22.590186 env[1736]: time="2025-11-01T00:46:22.589817489Z" level=info msg="RemovePodSandbox for \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\"" Nov 1 00:46:22.590186 env[1736]: time="2025-11-01T00:46:22.589854569Z" level=info msg="Forcibly stopping sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\"" Nov 1 00:46:22.671337 env[1736]: time="2025-11-01T00:46:22.671245821Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.645 [WARNING][5210] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0", GenerateName:"goldmane-7c778bb748-", Namespace:"calico-system", SelfLink:"", UID:"b1382796-d43e-42cf-9f8e-009d999e587c", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7c778bb748", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"7d9f496265d4097e07033d2da12a531a44dda4b2984737a5a95f0e649d89c002", Pod:"goldmane-7c778bb748-5czvc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.71.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic9137587fbf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.645 [INFO][5210] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.645 [INFO][5210] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" iface="eth0" netns="" Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.645 [INFO][5210] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.645 [INFO][5210] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.688 [INFO][5217] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.688 [INFO][5217] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.688 [INFO][5217] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.697 [WARNING][5217] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.697 [INFO][5217] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" HandleID="k8s-pod-network.dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Workload="ip--172--31--16--197-k8s-goldmane--7c778bb748--5czvc-eth0" Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.700 [INFO][5217] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.704288 env[1736]: 2025-11-01 00:46:22.701 [INFO][5210] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa" Nov 1 00:46:22.705056 env[1736]: time="2025-11-01T00:46:22.704312440Z" level=info msg="TearDown network for sandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\" successfully" Nov 1 00:46:22.711452 env[1736]: time="2025-11-01T00:46:22.711391059Z" level=info msg="RemovePodSandbox \"dd44ba2b14fd39971a6c57b1a1461ead56a00150e4175bf0be8dfcc13bf66daa\" returns successfully" Nov 1 00:46:22.712279 env[1736]: time="2025-11-01T00:46:22.712235947Z" level=info msg="StopPodSandbox for \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\"" Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.767 [WARNING][5231] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0", GenerateName:"coredns-66bc5c9577-", Namespace:"kube-system", SelfLink:"", UID:"7e26727d-5219-45e0-9b07-a268a5569ad2", ResourceVersion:"1130", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"66bc5c9577", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43", Pod:"coredns-66bc5c9577-2xnzk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.71.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali61c2bfb3dc9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"liveness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1f90, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"readiness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1ff5, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.768 [INFO][5231] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.768 [INFO][5231] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" iface="eth0" netns="" Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.768 [INFO][5231] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.768 [INFO][5231] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.803 [INFO][5238] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.803 [INFO][5238] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.803 [INFO][5238] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.810 [WARNING][5238] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.810 [INFO][5238] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.812 [INFO][5238] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.816680 env[1736]: 2025-11-01 00:46:22.814 [INFO][5231] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:22.817659 env[1736]: time="2025-11-01T00:46:22.817612960Z" level=info msg="TearDown network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\" successfully" Nov 1 00:46:22.817804 env[1736]: time="2025-11-01T00:46:22.817780299Z" level=info msg="StopPodSandbox for \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\" returns successfully" Nov 1 00:46:22.819028 env[1736]: time="2025-11-01T00:46:22.818995167Z" level=info msg="RemovePodSandbox for \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\"" Nov 1 00:46:22.819140 env[1736]: time="2025-11-01T00:46:22.819033145Z" level=info msg="Forcibly stopping sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\"" Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.865 [WARNING][5252] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0", GenerateName:"coredns-66bc5c9577-", Namespace:"kube-system", SelfLink:"", UID:"7e26727d-5219-45e0-9b07-a268a5569ad2", ResourceVersion:"1130", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"66bc5c9577", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"1b79917721f1a6476e2cfc5af7593f7409bc5842231d690a2ab288b6eec71f43", Pod:"coredns-66bc5c9577-2xnzk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.71.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali61c2bfb3dc9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"liveness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1f90, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"readiness-probe", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x1ff5, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.865 [INFO][5252] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.865 [INFO][5252] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" iface="eth0" netns="" Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.865 [INFO][5252] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.865 [INFO][5252] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.895 [INFO][5259] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.895 [INFO][5259] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.896 [INFO][5259] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.902 [WARNING][5259] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.903 [INFO][5259] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" HandleID="k8s-pod-network.54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Workload="ip--172--31--16--197-k8s-coredns--66bc5c9577--2xnzk-eth0" Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.905 [INFO][5259] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:22.910507 env[1736]: 2025-11-01 00:46:22.907 [INFO][5252] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a" Nov 1 00:46:22.912280 env[1736]: time="2025-11-01T00:46:22.910528550Z" level=info msg="TearDown network for sandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\" successfully" Nov 1 00:46:22.916208 env[1736]: time="2025-11-01T00:46:22.916147998Z" level=info msg="RemovePodSandbox \"54c63617f375bce834439f116381c60ecac437793cdac3edbf33b3977d0f786a\" returns successfully" Nov 1 00:46:22.916767 env[1736]: time="2025-11-01T00:46:22.916727831Z" level=info msg="StopPodSandbox for \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\"" Nov 1 00:46:22.920346 env[1736]: time="2025-11-01T00:46:22.920290245Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:22.922513 env[1736]: time="2025-11-01T00:46:22.922440179Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:46:22.922794 kubelet[2626]: E1101 00:46:22.922708 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:46:22.923429 kubelet[2626]: E1101 00:46:22.922800 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:46:22.923429 kubelet[2626]: E1101 00:46:22.923039 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container goldmane start failed in pod goldmane-7c778bb748-5czvc_calico-system(b1382796-d43e-42cf-9f8e-009d999e587c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:22.923429 kubelet[2626]: E1101 00:46:22.923089 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:46:22.925350 env[1736]: time="2025-11-01T00:46:22.925308916Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:22.974 [WARNING][5273] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0", GenerateName:"calico-kube-controllers-6c99b8d486-", Namespace:"calico-system", SelfLink:"", UID:"4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc", ResourceVersion:"950", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c99b8d486", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e", Pod:"calico-kube-controllers-6c99b8d486-hs4b2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.71.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif600e4653cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:22.975 [INFO][5273] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:22.975 [INFO][5273] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" iface="eth0" netns="" Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:22.975 [INFO][5273] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:22.975 [INFO][5273] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:23.015 [INFO][5281] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:23.016 [INFO][5281] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:23.016 [INFO][5281] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:23.029 [WARNING][5281] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:23.030 [INFO][5281] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:23.033 [INFO][5281] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:23.037346 env[1736]: 2025-11-01 00:46:23.035 [INFO][5273] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:23.037346 env[1736]: time="2025-11-01T00:46:23.037077295Z" level=info msg="TearDown network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\" successfully" Nov 1 00:46:23.037346 env[1736]: time="2025-11-01T00:46:23.037116249Z" level=info msg="StopPodSandbox for \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\" returns successfully" Nov 1 00:46:23.038920 env[1736]: time="2025-11-01T00:46:23.037984071Z" level=info msg="RemovePodSandbox for \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\"" Nov 1 00:46:23.038920 env[1736]: time="2025-11-01T00:46:23.038018463Z" level=info msg="Forcibly stopping sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\"" Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.085 [WARNING][5296] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0", GenerateName:"calico-kube-controllers-6c99b8d486-", Namespace:"calico-system", SelfLink:"", UID:"4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc", ResourceVersion:"950", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c99b8d486", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"f5eb170d355e5ad8af104761a8b262498f50ddaee8d0e11683ca422650ecf65e", Pod:"calico-kube-controllers-6c99b8d486-hs4b2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.71.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif600e4653cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.085 [INFO][5296] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.085 [INFO][5296] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" iface="eth0" netns="" Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.085 [INFO][5296] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.085 [INFO][5296] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.120 [INFO][5305] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.120 [INFO][5305] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.121 [INFO][5305] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.128 [WARNING][5305] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.128 [INFO][5305] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" HandleID="k8s-pod-network.f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Workload="ip--172--31--16--197-k8s-calico--kube--controllers--6c99b8d486--hs4b2-eth0" Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.130 [INFO][5305] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:23.134563 env[1736]: 2025-11-01 00:46:23.132 [INFO][5296] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c" Nov 1 00:46:23.135282 env[1736]: time="2025-11-01T00:46:23.135231569Z" level=info msg="TearDown network for sandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\" successfully" Nov 1 00:46:23.141195 env[1736]: time="2025-11-01T00:46:23.141149962Z" level=info msg="RemovePodSandbox \"f3bd85224f9d3e46d0ec393a7722beda288c462d05bfe9057f411e3921475d8c\" returns successfully" Nov 1 00:46:23.141648 env[1736]: time="2025-11-01T00:46:23.141602468Z" level=info msg="StopPodSandbox for \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\"" Nov 1 00:46:23.172431 env[1736]: time="2025-11-01T00:46:23.172380192Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:23.175021 env[1736]: time="2025-11-01T00:46:23.174950848Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:46:23.175519 kubelet[2626]: E1101 00:46:23.175452 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:46:23.175519 kubelet[2626]: E1101 00:46:23.175500 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:46:23.175843 kubelet[2626]: E1101 00:46:23.175776 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-kube-controllers start failed in pod calico-kube-controllers-6c99b8d486-hs4b2_calico-system(4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:23.176084 kubelet[2626]: E1101 00:46:23.175830 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:46:23.177270 env[1736]: time="2025-11-01T00:46:23.177233285Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:46:23.201000 audit[5328]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=5328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:23.207868 kernel: audit: type=1325 audit(1761957983.201:1346): table=filter:120 family=2 entries=14 op=nft_register_rule pid=5328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:23.201000 audit[5328]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd20c9d6c0 a2=0 a3=7ffd20c9d6ac items=0 ppid=2914 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:23.219865 kernel: audit: type=1300 audit(1761957983.201:1346): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd20c9d6c0 a2=0 a3=7ffd20c9d6ac items=0 ppid=2914 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:23.226148 systemd[1]: Started sshd@8-172.31.16.197:22-147.75.109.163:44948.service. Nov 1 00:46:23.201000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:23.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.197:22-147.75.109.163:44948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:23.241616 kernel: audit: type=1327 audit(1761957983.201:1346): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:23.241733 kernel: audit: type=1130 audit(1761957983.225:1347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.197:22-147.75.109.163:44948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.192 [WARNING][5319] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.197 [INFO][5319] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.198 [INFO][5319] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" iface="eth0" netns="" Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.198 [INFO][5319] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.198 [INFO][5319] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.256 [INFO][5327] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.256 [INFO][5327] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.256 [INFO][5327] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.266 [WARNING][5327] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.266 [INFO][5327] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.268 [INFO][5327] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:23.274717 env[1736]: 2025-11-01 00:46:23.272 [INFO][5319] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:23.274717 env[1736]: time="2025-11-01T00:46:23.274631728Z" level=info msg="TearDown network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\" successfully" Nov 1 00:46:23.274717 env[1736]: time="2025-11-01T00:46:23.274667883Z" level=info msg="StopPodSandbox for \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\" returns successfully" Nov 1 00:46:23.276102 env[1736]: time="2025-11-01T00:46:23.276074054Z" level=info msg="RemovePodSandbox for \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\"" Nov 1 00:46:23.276281 env[1736]: time="2025-11-01T00:46:23.276235177Z" level=info msg="Forcibly stopping sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\"" Nov 1 00:46:23.302000 audit[5328]: NETFILTER_CFG table=nat:121 family=2 entries=56 op=nft_register_chain pid=5328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:23.310890 kernel: audit: type=1325 audit(1761957983.302:1348): table=nat:121 family=2 entries=56 op=nft_register_chain pid=5328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:23.302000 audit[5328]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd20c9d6c0 a2=0 a3=7ffd20c9d6ac items=0 ppid=2914 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:23.322838 kernel: audit: type=1300 audit(1761957983.302:1348): arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd20c9d6c0 a2=0 a3=7ffd20c9d6ac items=0 ppid=2914 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:23.302000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:23.330805 kernel: audit: type=1327 audit(1761957983.302:1348): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.372 [WARNING][5346] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" WorkloadEndpoint="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.372 [INFO][5346] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.372 [INFO][5346] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" iface="eth0" netns="" Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.372 [INFO][5346] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.372 [INFO][5346] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.398 [INFO][5356] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.398 [INFO][5356] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.398 [INFO][5356] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.406 [WARNING][5356] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.406 [INFO][5356] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" HandleID="k8s-pod-network.085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Workload="ip--172--31--16--197-k8s-whisker--7dc594686b--qh8nt-eth0" Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.409 [INFO][5356] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:23.416315 env[1736]: 2025-11-01 00:46:23.412 [INFO][5346] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb" Nov 1 00:46:23.416315 env[1736]: time="2025-11-01T00:46:23.413898646Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:23.416315 env[1736]: time="2025-11-01T00:46:23.414321572Z" level=info msg="TearDown network for sandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\" successfully" Nov 1 00:46:23.422480 env[1736]: time="2025-11-01T00:46:23.416560551Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:46:23.422542 kubelet[2626]: E1101 00:46:23.416837 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:23.422542 kubelet[2626]: E1101 00:46:23.416884 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:23.422542 kubelet[2626]: E1101 00:46:23.416990 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-apiserver start failed in pod calico-apiserver-5456df96b8-5zpgr_calico-apiserver(356f7291-d15f-418b-af8c-74797b886c7a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:23.422542 kubelet[2626]: E1101 00:46:23.417033 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:46:23.423999 env[1736]: time="2025-11-01T00:46:23.423951770Z" level=info msg="RemovePodSandbox \"085684e1a7fb2b70059065add8fd9ac900873f40980f98687d853b83bb16eafb\" returns successfully" Nov 1 00:46:23.424814 env[1736]: time="2025-11-01T00:46:23.424772724Z" level=info msg="StopPodSandbox for \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\"" Nov 1 00:46:23.486814 kernel: audit: type=1101 audit(1761957983.478:1349): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:23.478000 audit[5333]: USER_ACCT pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:23.487191 sshd[5333]: Accepted publickey for core from 147.75.109.163 port 44948 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:23.486000 audit[5333]: CRED_ACQ pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:23.489441 sshd[5333]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:23.497513 kernel: audit: type=1103 audit(1761957983.486:1350): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:23.486000 audit[5333]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc56195620 a2=3 a3=0 items=0 ppid=1 pid=5333 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:23.486000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:23.502849 kernel: audit: type=1006 audit(1761957983.486:1351): pid=5333 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Nov 1 00:46:23.505332 systemd[1]: Started session-9.scope. Nov 1 00:46:23.506872 systemd-logind[1726]: New session 9 of user core. Nov 1 00:46:23.514000 audit[5333]: USER_START pid=5333 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:23.517000 audit[5385]: CRED_ACQ pid=5385 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.504 [WARNING][5373] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a9ee1226-e5f0-4660-960b-3308581cda89", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"9d99788f7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734", Pod:"csi-node-driver-k2xb7", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.71.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0a2eacd33cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.510 [INFO][5373] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.510 [INFO][5373] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" iface="eth0" netns="" Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.510 [INFO][5373] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.510 [INFO][5373] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.537 [INFO][5380] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.537 [INFO][5380] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.538 [INFO][5380] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.544 [WARNING][5380] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.545 [INFO][5380] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.547 [INFO][5380] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:23.551303 env[1736]: 2025-11-01 00:46:23.549 [INFO][5373] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:23.553288 env[1736]: time="2025-11-01T00:46:23.551632015Z" level=info msg="TearDown network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\" successfully" Nov 1 00:46:23.553288 env[1736]: time="2025-11-01T00:46:23.551672128Z" level=info msg="StopPodSandbox for \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\" returns successfully" Nov 1 00:46:23.553288 env[1736]: time="2025-11-01T00:46:23.552403964Z" level=info msg="RemovePodSandbox for \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\"" Nov 1 00:46:23.553288 env[1736]: time="2025-11-01T00:46:23.552441290Z" level=info msg="Forcibly stopping sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\"" Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.592 [WARNING][5395] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a9ee1226-e5f0-4660-960b-3308581cda89", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 45, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"9d99788f7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-197", ContainerID:"688377ca0c442f8ead42b9873b5f66f92b380db866bb57baa7361b72d2d8f734", Pod:"csi-node-driver-k2xb7", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.71.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0a2eacd33cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.593 [INFO][5395] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.593 [INFO][5395] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" iface="eth0" netns="" Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.593 [INFO][5395] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.593 [INFO][5395] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.631 [INFO][5402] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.631 [INFO][5402] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.631 [INFO][5402] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.643 [WARNING][5402] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.643 [INFO][5402] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" HandleID="k8s-pod-network.7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Workload="ip--172--31--16--197-k8s-csi--node--driver--k2xb7-eth0" Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.647 [INFO][5402] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:46:23.652519 env[1736]: 2025-11-01 00:46:23.649 [INFO][5395] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df" Nov 1 00:46:23.653393 env[1736]: time="2025-11-01T00:46:23.652555882Z" level=info msg="TearDown network for sandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\" successfully" Nov 1 00:46:23.658822 env[1736]: time="2025-11-01T00:46:23.658766166Z" level=info msg="RemovePodSandbox \"7336fceff86f02e3415b2bd7caf50e1c5b11898d8eed7ce2107d11e2241376df\" returns successfully" Nov 1 00:46:23.944698 sshd[5333]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:23.945000 audit[5333]: USER_END pid=5333 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:23.945000 audit[5333]: CRED_DISP pid=5333 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:23.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.197:22-147.75.109.163:44948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:23.947742 systemd[1]: sshd@8-172.31.16.197:22-147.75.109.163:44948.service: Deactivated successfully. Nov 1 00:46:23.948682 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:46:23.949550 systemd-logind[1726]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:46:23.950356 systemd-logind[1726]: Removed session 9. Nov 1 00:46:25.412000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:25.412000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00030a240 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:46:25.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:25.413000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:25.413000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00030a380 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:46:25.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:25.413000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:25.413000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00030a4c0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:46:25.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:25.419000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:25.419000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d7e2c0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:46:25.419000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:26.676661 env[1736]: time="2025-11-01T00:46:26.676401907Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:46:26.919180 env[1736]: time="2025-11-01T00:46:26.919127125Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:26.922349 env[1736]: time="2025-11-01T00:46:26.922182420Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:46:26.922540 kubelet[2626]: E1101 00:46:26.922472 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:46:26.922863 kubelet[2626]: E1101 00:46:26.922541 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:46:26.922863 kubelet[2626]: E1101 00:46:26.922635 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-csi start failed in pod csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:26.923772 env[1736]: time="2025-11-01T00:46:26.923723836Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:46:27.181634 env[1736]: time="2025-11-01T00:46:27.181569015Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:27.184734 env[1736]: time="2025-11-01T00:46:27.184641671Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:46:27.185000 kubelet[2626]: E1101 00:46:27.184923 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:46:27.185000 kubelet[2626]: E1101 00:46:27.184976 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:46:27.185148 kubelet[2626]: E1101 00:46:27.185069 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container csi-node-driver-registrar start failed in pod csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:27.185278 kubelet[2626]: E1101 00:46:27.185127 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:46:27.669869 env[1736]: time="2025-11-01T00:46:27.669611533Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:46:27.918445 env[1736]: time="2025-11-01T00:46:27.918389161Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:27.920783 env[1736]: time="2025-11-01T00:46:27.920625762Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:46:27.921292 kubelet[2626]: E1101 00:46:27.921058 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:27.921292 kubelet[2626]: E1101 00:46:27.921138 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:27.921292 kubelet[2626]: E1101 00:46:27.921250 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-apiserver start failed in pod calico-apiserver-5456df96b8-f9wrw_calico-apiserver(703a5252-c145-457e-b648-c986dff90c0c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:27.921525 kubelet[2626]: E1101 00:46:27.921328 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:46:28.973336 systemd[1]: Started sshd@9-172.31.16.197:22-147.75.109.163:44956.service. Nov 1 00:46:28.984330 kernel: kauditd_printk_skb: 19 callbacks suppressed Nov 1 00:46:28.984471 kernel: audit: type=1130 audit(1761957988.973:1361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.197:22-147.75.109.163:44956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:28.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.197:22-147.75.109.163:44956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:29.137000 audit[5419]: USER_ACCT pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.147237 sshd[5419]: Accepted publickey for core from 147.75.109.163 port 44956 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:29.146000 audit[5419]: CRED_ACQ pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.147911 sshd[5419]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:29.155112 kernel: audit: type=1101 audit(1761957989.137:1362): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.155418 kernel: audit: type=1103 audit(1761957989.146:1363): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.155456 kernel: audit: type=1006 audit(1761957989.146:1364): pid=5419 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:46:29.146000 audit[5419]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0627f510 a2=3 a3=0 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:29.166660 kernel: audit: type=1300 audit(1761957989.146:1364): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0627f510 a2=3 a3=0 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:29.166819 kernel: audit: type=1327 audit(1761957989.146:1364): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:29.146000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:29.166275 systemd[1]: Started session-10.scope. Nov 1 00:46:29.167968 systemd-logind[1726]: New session 10 of user core. Nov 1 00:46:29.175000 audit[5419]: USER_START pid=5419 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.184811 kernel: audit: type=1105 audit(1761957989.175:1365): pid=5419 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.184974 kernel: audit: type=1103 audit(1761957989.181:1366): pid=5421 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.181000 audit[5421]: CRED_ACQ pid=5421 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.368975 sshd[5419]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:29.371000 audit[5419]: USER_END pid=5419 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.372000 audit[5419]: CRED_DISP pid=5419 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.383241 systemd[1]: sshd@9-172.31.16.197:22-147.75.109.163:44956.service: Deactivated successfully. Nov 1 00:46:29.384362 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:46:29.389942 kernel: audit: type=1106 audit(1761957989.371:1367): pid=5419 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.390033 kernel: audit: type=1104 audit(1761957989.372:1368): pid=5419 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.197:22-147.75.109.163:44956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:29.390786 systemd-logind[1726]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:46:29.397387 systemd[1]: Started sshd@10-172.31.16.197:22-147.75.109.163:44958.service. Nov 1 00:46:29.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.197:22-147.75.109.163:44958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:29.399594 systemd-logind[1726]: Removed session 10. Nov 1 00:46:29.560000 audit[5434]: USER_ACCT pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.561597 sshd[5434]: Accepted publickey for core from 147.75.109.163 port 44958 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:29.561000 audit[5434]: CRED_ACQ pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.562000 audit[5434]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2f3cf190 a2=3 a3=0 items=0 ppid=1 pid=5434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:29.562000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:29.563180 sshd[5434]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:29.568819 systemd-logind[1726]: New session 11 of user core. Nov 1 00:46:29.568961 systemd[1]: Started session-11.scope. Nov 1 00:46:29.574000 audit[5434]: USER_START pid=5434 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.576000 audit[5436]: CRED_ACQ pid=5436 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.882822 sshd[5434]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:29.884000 audit[5434]: USER_END pid=5434 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.884000 audit[5434]: CRED_DISP pid=5434 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:29.887490 systemd-logind[1726]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:46:29.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.197:22-147.75.109.163:44958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:29.889038 systemd[1]: sshd@10-172.31.16.197:22-147.75.109.163:44958.service: Deactivated successfully. Nov 1 00:46:29.889865 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:46:29.891625 systemd-logind[1726]: Removed session 11. Nov 1 00:46:29.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.197:22-147.75.109.163:44968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:29.907426 systemd[1]: Started sshd@11-172.31.16.197:22-147.75.109.163:44968.service. Nov 1 00:46:30.077000 audit[5444]: USER_ACCT pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:30.078736 sshd[5444]: Accepted publickey for core from 147.75.109.163 port 44968 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:30.079000 audit[5444]: CRED_ACQ pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:30.079000 audit[5444]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd8718190 a2=3 a3=0 items=0 ppid=1 pid=5444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:30.079000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:30.081279 sshd[5444]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:30.086743 systemd-logind[1726]: New session 12 of user core. Nov 1 00:46:30.087431 systemd[1]: Started session-12.scope. Nov 1 00:46:30.093000 audit[5444]: USER_START pid=5444 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:30.094000 audit[5446]: CRED_ACQ pid=5446 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:30.302208 sshd[5444]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:30.303000 audit[5444]: USER_END pid=5444 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:30.303000 audit[5444]: CRED_DISP pid=5444 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:30.306277 systemd-logind[1726]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:46:30.306410 systemd[1]: sshd@11-172.31.16.197:22-147.75.109.163:44968.service: Deactivated successfully. Nov 1 00:46:30.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.197:22-147.75.109.163:44968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:30.307473 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:46:30.308860 systemd-logind[1726]: Removed session 12. Nov 1 00:46:35.333779 kernel: kauditd_printk_skb: 23 callbacks suppressed Nov 1 00:46:35.333946 kernel: audit: type=1130 audit(1761957995.329:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.197:22-147.75.109.163:41846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:35.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.197:22-147.75.109.163:41846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:35.330374 systemd[1]: Started sshd@12-172.31.16.197:22-147.75.109.163:41846.service. Nov 1 00:46:35.494000 audit[5470]: USER_ACCT pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.502698 sshd[5470]: Accepted publickey for core from 147.75.109.163 port 41846 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:35.503014 kernel: audit: type=1101 audit(1761957995.494:1389): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.502000 audit[5470]: CRED_ACQ pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.503507 sshd[5470]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:35.510869 kernel: audit: type=1103 audit(1761957995.502:1390): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.510976 kernel: audit: type=1006 audit(1761957995.502:1391): pid=5470 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Nov 1 00:46:35.514114 systemd[1]: Started session-13.scope. Nov 1 00:46:35.502000 audit[5470]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9df09820 a2=3 a3=0 items=0 ppid=1 pid=5470 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:35.516441 systemd-logind[1726]: New session 13 of user core. Nov 1 00:46:35.522069 kernel: audit: type=1300 audit(1761957995.502:1391): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9df09820 a2=3 a3=0 items=0 ppid=1 pid=5470 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:35.525904 kernel: audit: type=1327 audit(1761957995.502:1391): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:35.526016 kernel: audit: type=1105 audit(1761957995.522:1392): pid=5470 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.502000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:35.522000 audit[5470]: USER_START pid=5470 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.524000 audit[5472]: CRED_ACQ pid=5472 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.539513 kernel: audit: type=1103 audit(1761957995.524:1393): pid=5472 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.670935 kubelet[2626]: E1101 00:46:35.670726 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:46:35.728432 sshd[5470]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:35.730000 audit[5470]: USER_END pid=5470 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.733663 systemd[1]: sshd@12-172.31.16.197:22-147.75.109.163:41846.service: Deactivated successfully. Nov 1 00:46:35.734828 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:46:35.738516 systemd-logind[1726]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:46:35.740003 systemd-logind[1726]: Removed session 13. Nov 1 00:46:35.730000 audit[5470]: CRED_DISP pid=5470 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.749182 kernel: audit: type=1106 audit(1761957995.730:1394): pid=5470 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.749314 kernel: audit: type=1104 audit(1761957995.730:1395): pid=5470 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:35.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.197:22-147.75.109.163:41846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:36.668449 kubelet[2626]: E1101 00:46:36.668408 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:46:36.668885 kubelet[2626]: E1101 00:46:36.668852 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:46:37.679178 kubelet[2626]: E1101 00:46:37.679083 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:46:39.670508 kubelet[2626]: E1101 00:46:39.670460 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:46:39.989251 amazon-ssm-agent[1754]: 2025-11-01 00:46:39 INFO [HealthCheck] HealthCheck reporting agent health. Nov 1 00:46:40.668381 kubelet[2626]: E1101 00:46:40.668340 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:46:40.755558 systemd[1]: Started sshd@13-172.31.16.197:22-147.75.109.163:37992.service. Nov 1 00:46:40.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.197:22-147.75.109.163:37992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:40.758135 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:46:40.758234 kernel: audit: type=1130 audit(1761958000.754:1397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.197:22-147.75.109.163:37992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:40.952000 audit[5507]: USER_ACCT pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:40.954142 sshd[5507]: Accepted publickey for core from 147.75.109.163 port 37992 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:40.962883 kernel: audit: type=1101 audit(1761958000.952:1398): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:40.962000 audit[5507]: CRED_ACQ pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:40.972402 sshd[5507]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:40.977610 kernel: audit: type=1103 audit(1761958000.962:1399): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:40.977759 kernel: audit: type=1006 audit(1761958000.963:1400): pid=5507 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Nov 1 00:46:40.963000 audit[5507]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc35df7da0 a2=3 a3=0 items=0 ppid=1 pid=5507 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:40.963000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:40.993734 kernel: audit: type=1300 audit(1761958000.963:1400): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc35df7da0 a2=3 a3=0 items=0 ppid=1 pid=5507 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:40.993877 kernel: audit: type=1327 audit(1761958000.963:1400): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:40.992237 systemd[1]: Started session-14.scope. Nov 1 00:46:40.992892 systemd-logind[1726]: New session 14 of user core. Nov 1 00:46:41.000000 audit[5507]: USER_START pid=5507 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:41.011841 kernel: audit: type=1105 audit(1761958001.000:1401): pid=5507 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:41.002000 audit[5509]: CRED_ACQ pid=5509 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:41.020585 kernel: audit: type=1103 audit(1761958001.002:1402): pid=5509 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:41.245590 sshd[5507]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:41.247000 audit[5507]: USER_END pid=5507 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:41.251068 systemd[1]: sshd@13-172.31.16.197:22-147.75.109.163:37992.service: Deactivated successfully. Nov 1 00:46:41.252209 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:46:41.258851 kernel: audit: type=1106 audit(1761958001.247:1403): pid=5507 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:41.258990 kernel: audit: type=1104 audit(1761958001.247:1404): pid=5507 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:41.247000 audit[5507]: CRED_DISP pid=5507 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:41.260849 systemd-logind[1726]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:46:41.263138 systemd-logind[1726]: Removed session 14. Nov 1 00:46:41.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.197:22-147.75.109.163:37992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:46.272885 systemd[1]: Started sshd@14-172.31.16.197:22-147.75.109.163:37998.service. Nov 1 00:46:46.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.197:22-147.75.109.163:37998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:46.275490 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:46:46.275599 kernel: audit: type=1130 audit(1761958006.272:1406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.197:22-147.75.109.163:37998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:46.480992 sshd[5520]: Accepted publickey for core from 147.75.109.163 port 37998 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:46.478000 audit[5520]: USER_ACCT pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.491903 kernel: audit: type=1101 audit(1761958006.478:1407): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.493473 sshd[5520]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:46.491000 audit[5520]: CRED_ACQ pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.506873 kernel: audit: type=1103 audit(1761958006.491:1408): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.513849 kernel: audit: type=1006 audit(1761958006.491:1409): pid=5520 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:46:46.512178 systemd-logind[1726]: New session 15 of user core. Nov 1 00:46:46.512854 systemd[1]: Started session-15.scope. Nov 1 00:46:46.526103 kernel: audit: type=1300 audit(1761958006.491:1409): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5386c3a0 a2=3 a3=0 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:46.491000 audit[5520]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5386c3a0 a2=3 a3=0 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:46.491000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:46.532793 kernel: audit: type=1327 audit(1761958006.491:1409): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:46.527000 audit[5520]: USER_START pid=5520 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.545523 kernel: audit: type=1105 audit(1761958006.527:1410): pid=5520 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.532000 audit[5522]: CRED_ACQ pid=5522 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.555896 kernel: audit: type=1103 audit(1761958006.532:1411): pid=5522 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.843204 sshd[5520]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:46.845000 audit[5520]: USER_END pid=5520 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.849385 systemd-logind[1726]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:46:46.851198 systemd[1]: sshd@14-172.31.16.197:22-147.75.109.163:37998.service: Deactivated successfully. Nov 1 00:46:46.852281 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:46:46.853846 systemd-logind[1726]: Removed session 15. Nov 1 00:46:46.846000 audit[5520]: CRED_DISP pid=5520 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.867699 kernel: audit: type=1106 audit(1761958006.845:1412): pid=5520 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.867869 kernel: audit: type=1104 audit(1761958006.846:1413): pid=5520 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:46.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.197:22-147.75.109.163:37998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:47.703267 env[1736]: time="2025-11-01T00:46:47.703222929Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:46:47.956568 env[1736]: time="2025-11-01T00:46:47.956405318Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:47.958692 env[1736]: time="2025-11-01T00:46:47.958535790Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:46:47.964617 kubelet[2626]: E1101 00:46:47.962407 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:46:47.967317 kubelet[2626]: E1101 00:46:47.967270 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:46:47.968325 env[1736]: time="2025-11-01T00:46:47.968047435Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:46:47.968610 kubelet[2626]: E1101 00:46:47.968578 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-kube-controllers start failed in pod calico-kube-controllers-6c99b8d486-hs4b2_calico-system(4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:47.968780 kubelet[2626]: E1101 00:46:47.968626 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:46:48.221852 env[1736]: time="2025-11-01T00:46:48.221632421Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:48.223866 env[1736]: time="2025-11-01T00:46:48.223793925Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:46:48.224407 kubelet[2626]: E1101 00:46:48.224363 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:46:48.224571 kubelet[2626]: E1101 00:46:48.224549 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:46:48.224774 kubelet[2626]: E1101 00:46:48.224725 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container whisker start failed in pod whisker-5694757584-dtbgp_calico-system(da0b54df-6c7c-4295-a916-3e7023bdb682): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:48.226159 env[1736]: time="2025-11-01T00:46:48.226110370Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:46:48.458431 env[1736]: time="2025-11-01T00:46:48.458375736Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:48.460585 env[1736]: time="2025-11-01T00:46:48.460521318Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:46:48.460883 kubelet[2626]: E1101 00:46:48.460838 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:46:48.460986 kubelet[2626]: E1101 00:46:48.460886 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:46:48.461069 kubelet[2626]: E1101 00:46:48.460978 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container whisker-backend start failed in pod whisker-5694757584-dtbgp_calico-system(da0b54df-6c7c-4295-a916-3e7023bdb682): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:48.461069 kubelet[2626]: E1101 00:46:48.461033 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:46:49.669314 env[1736]: time="2025-11-01T00:46:49.669281419Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:46:49.920952 env[1736]: time="2025-11-01T00:46:49.920825448Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:49.922939 env[1736]: time="2025-11-01T00:46:49.922867007Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:46:49.923206 kubelet[2626]: E1101 00:46:49.923172 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:46:49.923505 kubelet[2626]: E1101 00:46:49.923217 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:46:49.923542 env[1736]: time="2025-11-01T00:46:49.923518514Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:46:49.923868 kubelet[2626]: E1101 00:46:49.923850 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container goldmane start failed in pod goldmane-7c778bb748-5czvc_calico-system(b1382796-d43e-42cf-9f8e-009d999e587c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:49.924144 kubelet[2626]: E1101 00:46:49.924121 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:46:50.163637 env[1736]: time="2025-11-01T00:46:50.163579956Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:50.165791 env[1736]: time="2025-11-01T00:46:50.165711455Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:46:50.166001 kubelet[2626]: E1101 00:46:50.165961 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:50.166080 kubelet[2626]: E1101 00:46:50.166012 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:50.166116 kubelet[2626]: E1101 00:46:50.166081 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-apiserver start failed in pod calico-apiserver-5456df96b8-5zpgr_calico-apiserver(356f7291-d15f-418b-af8c-74797b886c7a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:50.166149 kubelet[2626]: E1101 00:46:50.166111 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:46:51.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.197:22-147.75.109.163:59888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:51.870992 systemd[1]: Started sshd@15-172.31.16.197:22-147.75.109.163:59888.service. Nov 1 00:46:51.873563 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:46:51.873677 kernel: audit: type=1130 audit(1761958011.870:1415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.197:22-147.75.109.163:59888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:52.092000 audit[5538]: USER_ACCT pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.094132 sshd[5538]: Accepted publickey for core from 147.75.109.163 port 59888 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:52.101237 kernel: audit: type=1101 audit(1761958012.092:1416): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.100000 audit[5538]: CRED_ACQ pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.103295 sshd[5538]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:52.114255 systemd[1]: Started session-16.scope. Nov 1 00:46:52.116427 systemd-logind[1726]: New session 16 of user core. Nov 1 00:46:52.117648 kernel: audit: type=1103 audit(1761958012.100:1417): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.117723 kernel: audit: type=1006 audit(1761958012.100:1418): pid=5538 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:46:52.100000 audit[5538]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6318cd90 a2=3 a3=0 items=0 ppid=1 pid=5538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:52.100000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:52.133608 kernel: audit: type=1300 audit(1761958012.100:1418): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6318cd90 a2=3 a3=0 items=0 ppid=1 pid=5538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:52.133825 kernel: audit: type=1327 audit(1761958012.100:1418): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:52.123000 audit[5538]: USER_START pid=5538 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.123000 audit[5540]: CRED_ACQ pid=5540 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.148311 kernel: audit: type=1105 audit(1761958012.123:1419): pid=5538 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.148460 kernel: audit: type=1103 audit(1761958012.123:1420): pid=5540 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.483198 sshd[5538]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:52.488000 audit[5538]: USER_END pid=5538 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.497222 systemd[1]: sshd@15-172.31.16.197:22-147.75.109.163:59888.service: Deactivated successfully. Nov 1 00:46:52.498500 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:46:52.501113 kernel: audit: type=1106 audit(1761958012.488:1421): pid=5538 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.501277 kernel: audit: type=1104 audit(1761958012.489:1422): pid=5538 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.489000 audit[5538]: CRED_DISP pid=5538 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.500460 systemd-logind[1726]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:46:52.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.197:22-147.75.109.163:59888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:52.517178 systemd[1]: Started sshd@16-172.31.16.197:22-147.75.109.163:59896.service. Nov 1 00:46:52.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.197:22-147.75.109.163:59896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:52.518966 systemd-logind[1726]: Removed session 16. Nov 1 00:46:52.692000 audit[5552]: USER_ACCT pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.693183 sshd[5552]: Accepted publickey for core from 147.75.109.163 port 59896 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:52.693000 audit[5552]: CRED_ACQ pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.693000 audit[5552]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3fc8d470 a2=3 a3=0 items=0 ppid=1 pid=5552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:52.693000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:52.695543 sshd[5552]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:52.702388 systemd[1]: Started session-17.scope. Nov 1 00:46:52.703035 systemd-logind[1726]: New session 17 of user core. Nov 1 00:46:52.708000 audit[5552]: USER_START pid=5552 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:52.709000 audit[5554]: CRED_ACQ pid=5554 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:53.421040 sshd[5552]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:53.421000 audit[5552]: USER_END pid=5552 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:53.421000 audit[5552]: CRED_DISP pid=5552 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:53.425086 systemd[1]: sshd@16-172.31.16.197:22-147.75.109.163:59896.service: Deactivated successfully. Nov 1 00:46:53.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.197:22-147.75.109.163:59896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:53.425867 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:46:53.426334 systemd-logind[1726]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:46:53.429629 systemd-logind[1726]: Removed session 17. Nov 1 00:46:53.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.197:22-147.75.109.163:59904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:53.447084 systemd[1]: Started sshd@17-172.31.16.197:22-147.75.109.163:59904.service. Nov 1 00:46:53.627000 audit[5562]: USER_ACCT pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:53.629201 sshd[5562]: Accepted publickey for core from 147.75.109.163 port 59904 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:53.630000 audit[5562]: CRED_ACQ pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:53.630000 audit[5562]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc20e286e0 a2=3 a3=0 items=0 ppid=1 pid=5562 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:53.630000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:53.631443 sshd[5562]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:53.637504 systemd[1]: Started session-18.scope. Nov 1 00:46:53.638073 systemd-logind[1726]: New session 18 of user core. Nov 1 00:46:53.643000 audit[5562]: USER_START pid=5562 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:53.645000 audit[5564]: CRED_ACQ pid=5564 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:53.674444 env[1736]: time="2025-11-01T00:46:53.674307588Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:46:54.076343 env[1736]: time="2025-11-01T00:46:54.076163490Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:54.078280 env[1736]: time="2025-11-01T00:46:54.078211288Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:46:54.078504 kubelet[2626]: E1101 00:46:54.078460 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:46:54.078936 kubelet[2626]: E1101 00:46:54.078515 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:46:54.078936 kubelet[2626]: E1101 00:46:54.078633 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-csi start failed in pod csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:54.080657 env[1736]: time="2025-11-01T00:46:54.080620108Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:46:54.318962 env[1736]: time="2025-11-01T00:46:54.318765401Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:54.321035 env[1736]: time="2025-11-01T00:46:54.320882572Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:46:54.321407 kubelet[2626]: E1101 00:46:54.321364 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:46:54.321569 kubelet[2626]: E1101 00:46:54.321548 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:46:54.321820 kubelet[2626]: E1101 00:46:54.321788 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container csi-node-driver-registrar start failed in pod csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:54.322062 kubelet[2626]: E1101 00:46:54.322016 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:46:54.539000 audit[5576]: NETFILTER_CFG table=filter:122 family=2 entries=26 op=nft_register_rule pid=5576 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:54.539000 audit[5576]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffe4eee5f20 a2=0 a3=7ffe4eee5f0c items=0 ppid=2914 pid=5576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:54.539000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:54.545000 audit[5576]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=5576 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:54.545000 audit[5576]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe4eee5f20 a2=0 a3=0 items=0 ppid=2914 pid=5576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:54.545000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:54.558962 sshd[5562]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:54.559000 audit[5562]: USER_END pid=5562 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:54.559000 audit[5562]: CRED_DISP pid=5562 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:54.561934 systemd[1]: sshd@17-172.31.16.197:22-147.75.109.163:59904.service: Deactivated successfully. Nov 1 00:46:54.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.197:22-147.75.109.163:59904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:54.562897 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:46:54.563673 systemd-logind[1726]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:46:54.564612 systemd-logind[1726]: Removed session 18. Nov 1 00:46:54.585047 systemd[1]: Started sshd@18-172.31.16.197:22-147.75.109.163:59906.service. Nov 1 00:46:54.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.197:22-147.75.109.163:59906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:54.669190 env[1736]: time="2025-11-01T00:46:54.668902852Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:46:54.763742 sshd[5579]: Accepted publickey for core from 147.75.109.163 port 59906 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:54.762000 audit[5579]: USER_ACCT pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:54.764000 audit[5579]: CRED_ACQ pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:54.764000 audit[5579]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4a56bef0 a2=3 a3=0 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:54.764000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:54.766510 sshd[5579]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:54.772832 systemd[1]: Started session-19.scope. Nov 1 00:46:54.773376 systemd-logind[1726]: New session 19 of user core. Nov 1 00:46:54.788000 audit[5579]: USER_START pid=5579 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:54.792000 audit[5581]: CRED_ACQ pid=5581 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:54.908916 env[1736]: time="2025-11-01T00:46:54.908863273Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:46:54.911014 env[1736]: time="2025-11-01T00:46:54.910920371Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:46:54.911286 kubelet[2626]: E1101 00:46:54.911231 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:54.911363 kubelet[2626]: E1101 00:46:54.911293 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:46:54.911398 kubelet[2626]: E1101 00:46:54.911378 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-apiserver start failed in pod calico-apiserver-5456df96b8-f9wrw_calico-apiserver(703a5252-c145-457e-b648-c986dff90c0c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:46:54.911452 kubelet[2626]: E1101 00:46:54.911427 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:46:55.486418 sshd[5579]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:55.489000 audit[5579]: USER_END pid=5579 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:55.490000 audit[5579]: CRED_DISP pid=5579 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:55.492915 systemd[1]: sshd@18-172.31.16.197:22-147.75.109.163:59906.service: Deactivated successfully. Nov 1 00:46:55.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.197:22-147.75.109.163:59906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:55.494040 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:46:55.494787 systemd-logind[1726]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:46:55.496144 systemd-logind[1726]: Removed session 19. Nov 1 00:46:55.510290 systemd[1]: Started sshd@19-172.31.16.197:22-147.75.109.163:59914.service. Nov 1 00:46:55.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.197:22-147.75.109.163:59914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:55.558000 audit[5592]: NETFILTER_CFG table=filter:124 family=2 entries=38 op=nft_register_rule pid=5592 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:55.558000 audit[5592]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffd63b554d0 a2=0 a3=7ffd63b554bc items=0 ppid=2914 pid=5592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:55.558000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:55.563000 audit[5592]: NETFILTER_CFG table=nat:125 family=2 entries=20 op=nft_register_rule pid=5592 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:55.563000 audit[5592]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd63b554d0 a2=0 a3=0 items=0 ppid=2914 pid=5592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:55.563000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:55.700000 audit[5589]: USER_ACCT pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:55.701562 sshd[5589]: Accepted publickey for core from 147.75.109.163 port 59914 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:46:55.701000 audit[5589]: CRED_ACQ pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:55.701000 audit[5589]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1f7fdc20 a2=3 a3=0 items=0 ppid=1 pid=5589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:55.701000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:55.703365 sshd[5589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:55.709988 systemd-logind[1726]: New session 20 of user core. Nov 1 00:46:55.710578 systemd[1]: Started session-20.scope. Nov 1 00:46:55.717000 audit[5589]: USER_START pid=5589 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:55.719000 audit[5593]: CRED_ACQ pid=5593 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:55.950864 sshd[5589]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:55.952000 audit[5589]: USER_END pid=5589 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:55.952000 audit[5589]: CRED_DISP pid=5589 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:46:55.955255 systemd[1]: sshd@19-172.31.16.197:22-147.75.109.163:59914.service: Deactivated successfully. Nov 1 00:46:55.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.197:22-147.75.109.163:59914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:55.956155 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:46:55.957102 systemd-logind[1726]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:46:55.957950 systemd-logind[1726]: Removed session 20. Nov 1 00:47:00.671766 kubelet[2626]: E1101 00:47:00.671707 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:47:00.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.197:22-147.75.109.163:41144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:00.976247 systemd[1]: Started sshd@20-172.31.16.197:22-147.75.109.163:41144.service. Nov 1 00:47:00.986649 kernel: kauditd_printk_skb: 57 callbacks suppressed Nov 1 00:47:00.986832 kernel: audit: type=1130 audit(1761958020.975:1464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.197:22-147.75.109.163:41144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:01.158000 audit[5604]: USER_ACCT pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.186927 kernel: audit: type=1101 audit(1761958021.158:1465): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.186987 sshd[5604]: Accepted publickey for core from 147.75.109.163 port 41144 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:47:01.186000 audit[5604]: CRED_ACQ pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.210793 kernel: audit: type=1103 audit(1761958021.186:1466): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.226765 kernel: audit: type=1006 audit(1761958021.186:1467): pid=5604 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Nov 1 00:47:01.227195 sshd[5604]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:47:01.186000 audit[5604]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe060f8f10 a2=3 a3=0 items=0 ppid=1 pid=5604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:01.248691 systemd[1]: Started session-21.scope. Nov 1 00:47:01.255861 systemd-logind[1726]: New session 21 of user core. Nov 1 00:47:01.260515 kernel: audit: type=1300 audit(1761958021.186:1467): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe060f8f10 a2=3 a3=0 items=0 ppid=1 pid=5604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:01.186000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:01.277832 kernel: audit: type=1327 audit(1761958021.186:1467): proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:01.259000 audit[5604]: USER_START pid=5604 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.315895 kernel: audit: type=1105 audit(1761958021.259:1468): pid=5604 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.277000 audit[5606]: CRED_ACQ pid=5606 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.331783 kernel: audit: type=1103 audit(1761958021.277:1469): pid=5606 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.336000 audit[5608]: NETFILTER_CFG table=filter:126 family=2 entries=26 op=nft_register_rule pid=5608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:47:01.336000 audit[5608]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff20865890 a2=0 a3=7fff2086587c items=0 ppid=2914 pid=5608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:01.367381 kernel: audit: type=1325 audit(1761958021.336:1470): table=filter:126 family=2 entries=26 op=nft_register_rule pid=5608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:47:01.367498 kernel: audit: type=1300 audit(1761958021.336:1470): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff20865890 a2=0 a3=7fff2086587c items=0 ppid=2914 pid=5608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:01.336000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:47:01.345000 audit[5608]: NETFILTER_CFG table=nat:127 family=2 entries=104 op=nft_register_chain pid=5608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:47:01.345000 audit[5608]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7fff20865890 a2=0 a3=7fff2086587c items=0 ppid=2914 pid=5608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:01.345000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:47:01.787406 kubelet[2626]: E1101 00:47:01.787319 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:47:01.855942 sshd[5604]: pam_unix(sshd:session): session closed for user core Nov 1 00:47:01.860000 audit[5604]: USER_END pid=5604 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.861000 audit[5604]: CRED_DISP pid=5604 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:01.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.197:22-147.75.109.163:41144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:01.864710 systemd[1]: sshd@20-172.31.16.197:22-147.75.109.163:41144.service: Deactivated successfully. Nov 1 00:47:01.865844 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:47:01.873143 systemd-logind[1726]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:47:01.876066 systemd-logind[1726]: Removed session 21. Nov 1 00:47:03.668817 kubelet[2626]: E1101 00:47:03.668763 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:47:03.675701 kubelet[2626]: E1101 00:47:03.675642 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:47:06.880809 systemd[1]: Started sshd@21-172.31.16.197:22-147.75.109.163:41160.service. Nov 1 00:47:06.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.197:22-147.75.109.163:41160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:06.883499 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:47:06.883584 kernel: audit: type=1130 audit(1761958026.880:1475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.197:22-147.75.109.163:41160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:07.027672 systemd[1]: run-containerd-runc-k8s.io-23ad7c13f4723ce1296a0afe11da2a0cc68ac3566550bb4a360a97281e69d709-runc.Fx5hU6.mount: Deactivated successfully. Nov 1 00:47:07.062000 audit[5618]: USER_ACCT pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.063561 sshd[5618]: Accepted publickey for core from 147.75.109.163 port 41160 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:47:07.070776 kernel: audit: type=1101 audit(1761958027.062:1476): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.070898 kernel: audit: type=1103 audit(1761958027.067:1477): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.067000 audit[5618]: CRED_ACQ pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.073349 sshd[5618]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:47:07.085418 systemd-logind[1726]: New session 22 of user core. Nov 1 00:47:07.086274 systemd[1]: Started session-22.scope. Nov 1 00:47:07.069000 audit[5618]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb3a430f0 a2=3 a3=0 items=0 ppid=1 pid=5618 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:07.097340 kernel: audit: type=1006 audit(1761958027.069:1478): pid=5618 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Nov 1 00:47:07.097489 kernel: audit: type=1300 audit(1761958027.069:1478): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb3a430f0 a2=3 a3=0 items=0 ppid=1 pid=5618 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:07.069000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:07.104843 kernel: audit: type=1327 audit(1761958027.069:1478): proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:07.105000 audit[5618]: USER_START pid=5618 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.112000 audit[5641]: CRED_ACQ pid=5641 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.122669 kernel: audit: type=1105 audit(1761958027.105:1479): pid=5618 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.122833 kernel: audit: type=1103 audit(1761958027.112:1480): pid=5641 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.463044 sshd[5618]: pam_unix(sshd:session): session closed for user core Nov 1 00:47:07.465000 audit[5618]: USER_END pid=5618 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.473812 kernel: audit: type=1106 audit(1761958027.465:1481): pid=5618 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.473785 systemd[1]: sshd@21-172.31.16.197:22-147.75.109.163:41160.service: Deactivated successfully. Nov 1 00:47:07.474579 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:47:07.475145 systemd-logind[1726]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:47:07.465000 audit[5618]: CRED_DISP pid=5618 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.477262 systemd-logind[1726]: Removed session 22. Nov 1 00:47:07.482791 kernel: audit: type=1104 audit(1761958027.465:1482): pid=5618 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:07.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.197:22-147.75.109.163:41160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:08.668679 kubelet[2626]: E1101 00:47:08.668629 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:47:08.669533 kubelet[2626]: E1101 00:47:08.669493 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:47:12.502140 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:47:12.502304 kernel: audit: type=1130 audit(1761958032.490:1484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.197:22-147.75.109.163:51794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:12.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.197:22-147.75.109.163:51794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:12.490593 systemd[1]: Started sshd@22-172.31.16.197:22-147.75.109.163:51794.service. Nov 1 00:47:12.669936 kubelet[2626]: E1101 00:47:12.669904 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:47:12.681320 sshd[5651]: Accepted publickey for core from 147.75.109.163 port 51794 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:47:12.680000 audit[5651]: USER_ACCT pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.692871 kernel: audit: type=1101 audit(1761958032.680:1485): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.694290 sshd[5651]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:47:12.701577 systemd[1]: Started session-23.scope. Nov 1 00:47:12.702484 systemd-logind[1726]: New session 23 of user core. Nov 1 00:47:12.692000 audit[5651]: CRED_ACQ pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.715779 kernel: audit: type=1103 audit(1761958032.692:1486): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.722329 kernel: audit: type=1006 audit(1761958032.692:1487): pid=5651 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:47:12.692000 audit[5651]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2cc0cb90 a2=3 a3=0 items=0 ppid=1 pid=5651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:12.692000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:12.738726 kernel: audit: type=1300 audit(1761958032.692:1487): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2cc0cb90 a2=3 a3=0 items=0 ppid=1 pid=5651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:12.738929 kernel: audit: type=1327 audit(1761958032.692:1487): proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:12.738970 kernel: audit: type=1105 audit(1761958032.722:1488): pid=5651 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.722000 audit[5651]: USER_START pid=5651 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.723000 audit[5653]: CRED_ACQ pid=5653 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.759625 kernel: audit: type=1103 audit(1761958032.723:1489): pid=5653 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.987874 sshd[5651]: pam_unix(sshd:session): session closed for user core Nov 1 00:47:12.988000 audit[5651]: USER_END pid=5651 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.992851 systemd-logind[1726]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:47:12.994821 systemd[1]: sshd@22-172.31.16.197:22-147.75.109.163:51794.service: Deactivated successfully. Nov 1 00:47:12.995820 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:47:12.997561 systemd-logind[1726]: Removed session 23. Nov 1 00:47:13.000769 kernel: audit: type=1106 audit(1761958032.988:1490): pid=5651 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.988000 audit[5651]: CRED_DISP pid=5651 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:12.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.197:22-147.75.109.163:51794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:13.015774 kernel: audit: type=1104 audit(1761958032.988:1491): pid=5651 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:13.669695 kubelet[2626]: E1101 00:47:13.669639 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:47:14.669236 kubelet[2626]: E1101 00:47:14.669184 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:47:14.669735 kubelet[2626]: E1101 00:47:14.669674 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:47:15.010000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:15.010000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003552920 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:47:15.010000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:47:15.010000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:15.010000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0026b0750 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:47:15.010000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:47:17.080000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:17.080000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c013b7a560 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:47:17.080000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:47:17.081000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521061 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:17.081000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c014b969f0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:47:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:47:17.086000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:17.086000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c014b96a20 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:47:17.086000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:47:17.087000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:17.087000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c014b96ab0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:47:17.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:47:17.097000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521055 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:17.097000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c007c7f0b0 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:47:17.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:47:17.098000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:17.098000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c005a65860 a2=fc6 a3=0 items=0 ppid=2355 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c520 key=(null) Nov 1 00:47:17.098000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E313937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:47:18.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.197:22-147.75.109.163:51802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:18.017043 systemd[1]: Started sshd@23-172.31.16.197:22-147.75.109.163:51802.service. Nov 1 00:47:18.019474 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 00:47:18.019591 kernel: audit: type=1130 audit(1761958038.016:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.197:22-147.75.109.163:51802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:18.242323 sshd[5663]: Accepted publickey for core from 147.75.109.163 port 51802 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:47:18.241000 audit[5663]: USER_ACCT pid=5663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.252802 kernel: audit: type=1101 audit(1761958038.241:1502): pid=5663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.253249 sshd[5663]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:47:18.242000 audit[5663]: CRED_ACQ pid=5663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.270165 kernel: audit: type=1103 audit(1761958038.242:1503): pid=5663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.270359 kernel: audit: type=1006 audit(1761958038.242:1504): pid=5663 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Nov 1 00:47:18.271507 kernel: audit: type=1300 audit(1761958038.242:1504): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca4ab6220 a2=3 a3=0 items=0 ppid=1 pid=5663 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:18.242000 audit[5663]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca4ab6220 a2=3 a3=0 items=0 ppid=1 pid=5663 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:18.242000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:18.290187 kernel: audit: type=1327 audit(1761958038.242:1504): proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:18.291930 systemd[1]: Started session-24.scope. Nov 1 00:47:18.292615 systemd-logind[1726]: New session 24 of user core. Nov 1 00:47:18.300000 audit[5663]: USER_START pid=5663 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.314514 kernel: audit: type=1105 audit(1761958038.300:1505): pid=5663 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.314640 kernel: audit: type=1103 audit(1761958038.313:1506): pid=5665 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.313000 audit[5665]: CRED_ACQ pid=5665 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.781152 sshd[5663]: pam_unix(sshd:session): session closed for user core Nov 1 00:47:18.783000 audit[5663]: USER_END pid=5663 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.797950 kernel: audit: type=1106 audit(1761958038.783:1507): pid=5663 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.798281 systemd-logind[1726]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:47:18.798771 systemd[1]: sshd@23-172.31.16.197:22-147.75.109.163:51802.service: Deactivated successfully. Nov 1 00:47:18.799813 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:47:18.783000 audit[5663]: CRED_DISP pid=5663 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:18.801500 systemd-logind[1726]: Removed session 24. Nov 1 00:47:18.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.197:22-147.75.109.163:51802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:18.811000 kernel: audit: type=1104 audit(1761958038.783:1508): pid=5663 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:22.669254 kubelet[2626]: E1101 00:47:22.669202 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:47:22.670256 kubelet[2626]: E1101 00:47:22.670211 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:47:23.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.197:22-147.75.109.163:46884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:23.813866 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:47:23.814472 kernel: audit: type=1130 audit(1761958043.808:1510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.197:22-147.75.109.163:46884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:23.809589 systemd[1]: Started sshd@24-172.31.16.197:22-147.75.109.163:46884.service. Nov 1 00:47:24.004259 sshd[5677]: Accepted publickey for core from 147.75.109.163 port 46884 ssh2: RSA SHA256:pqbS4gO8wU1hfumMiqbicBJuOTPdWzHbSvYVadSA6Zw Nov 1 00:47:24.002000 audit[5677]: USER_ACCT pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.016798 kernel: audit: type=1101 audit(1761958044.002:1511): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.017238 sshd[5677]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:47:24.003000 audit[5677]: CRED_ACQ pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.029900 kernel: audit: type=1103 audit(1761958044.003:1512): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.035115 systemd-logind[1726]: New session 25 of user core. Nov 1 00:47:24.035973 systemd[1]: Started session-25.scope. Nov 1 00:47:24.038777 kernel: audit: type=1006 audit(1761958044.003:1513): pid=5677 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:47:24.050787 kernel: audit: type=1300 audit(1761958044.003:1513): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8ecb4430 a2=3 a3=0 items=0 ppid=1 pid=5677 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:24.003000 audit[5677]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8ecb4430 a2=3 a3=0 items=0 ppid=1 pid=5677 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:24.003000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:24.070850 kernel: audit: type=1327 audit(1761958044.003:1513): proctitle=737368643A20636F7265205B707269765D Nov 1 00:47:24.070999 kernel: audit: type=1105 audit(1761958044.050:1514): pid=5677 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.050000 audit[5677]: USER_START pid=5677 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.052000 audit[5679]: CRED_ACQ pid=5679 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.084415 kernel: audit: type=1103 audit(1761958044.052:1515): pid=5679 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.483454 sshd[5677]: pam_unix(sshd:session): session closed for user core Nov 1 00:47:24.484000 audit[5677]: USER_END pid=5677 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.488973 systemd-logind[1726]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:47:24.490198 systemd[1]: sshd@24-172.31.16.197:22-147.75.109.163:46884.service: Deactivated successfully. Nov 1 00:47:24.491288 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:47:24.492492 systemd-logind[1726]: Removed session 25. Nov 1 00:47:24.484000 audit[5677]: CRED_DISP pid=5677 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.506128 kernel: audit: type=1106 audit(1761958044.484:1516): pid=5677 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.506289 kernel: audit: type=1104 audit(1761958044.484:1517): pid=5677 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:47:24.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.197:22-147.75.109.163:46884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:47:24.682859 kubelet[2626]: E1101 00:47:24.679873 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:47:25.412000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:25.412000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0038c00e0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:47:25.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:47:25.412000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:25.412000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0038c0100 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:47:25.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:47:25.414000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:25.414000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0038c0120 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:47:25.414000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:47:25.419000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:25.419000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0038c02c0 a2=fc6 a3=0 items=0 ppid=2345 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:47:25.419000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:47:25.671172 kubelet[2626]: E1101 00:47:25.670210 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:47:27.670885 kubelet[2626]: E1101 00:47:27.670821 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:47:28.668459 kubelet[2626]: E1101 00:47:28.668416 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:47:34.679452 env[1736]: time="2025-11-01T00:47:34.679194824Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:47:34.922055 env[1736]: time="2025-11-01T00:47:34.922004208Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:47:34.924316 env[1736]: time="2025-11-01T00:47:34.924198090Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:47:34.929801 kubelet[2626]: E1101 00:47:34.926512 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:47:34.929801 kubelet[2626]: E1101 00:47:34.929736 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:47:34.931771 kubelet[2626]: E1101 00:47:34.931725 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-csi start failed in pod csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:47:34.941584 env[1736]: time="2025-11-01T00:47:34.941370463Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:47:35.181115 env[1736]: time="2025-11-01T00:47:35.180965571Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:47:35.183236 env[1736]: time="2025-11-01T00:47:35.183167788Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:47:35.183598 kubelet[2626]: E1101 00:47:35.183550 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:47:35.183598 kubelet[2626]: E1101 00:47:35.183602 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:47:35.183879 kubelet[2626]: E1101 00:47:35.183682 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container csi-node-driver-registrar start failed in pod csi-node-driver-k2xb7_calico-system(a9ee1226-e5f0-4660-960b-3308581cda89): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:47:35.183879 kubelet[2626]: E1101 00:47:35.183726 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-k2xb7" podUID="a9ee1226-e5f0-4660-960b-3308581cda89" Nov 1 00:47:36.668428 env[1736]: time="2025-11-01T00:47:36.668390024Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:47:36.924156 env[1736]: time="2025-11-01T00:47:36.924017398Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:47:36.926229 env[1736]: time="2025-11-01T00:47:36.926147762Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:47:36.926465 kubelet[2626]: E1101 00:47:36.926419 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:47:36.926739 kubelet[2626]: E1101 00:47:36.926475 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:47:36.926739 kubelet[2626]: E1101 00:47:36.926553 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-apiserver start failed in pod calico-apiserver-5456df96b8-5zpgr_calico-apiserver(356f7291-d15f-418b-af8c-74797b886c7a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:47:36.926739 kubelet[2626]: E1101 00:47:36.926584 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-5zpgr" podUID="356f7291-d15f-418b-af8c-74797b886c7a" Nov 1 00:47:37.671402 env[1736]: time="2025-11-01T00:47:37.671362448Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:47:37.921113 env[1736]: time="2025-11-01T00:47:37.921051750Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:47:37.923612 env[1736]: time="2025-11-01T00:47:37.923192252Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:47:37.923773 kubelet[2626]: E1101 00:47:37.923525 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:47:37.923773 kubelet[2626]: E1101 00:47:37.923615 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:47:37.924840 kubelet[2626]: E1101 00:47:37.923901 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-apiserver start failed in pod calico-apiserver-5456df96b8-f9wrw_calico-apiserver(703a5252-c145-457e-b648-c986dff90c0c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:47:37.924840 kubelet[2626]: E1101 00:47:37.924032 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5456df96b8-f9wrw" podUID="703a5252-c145-457e-b648-c986dff90c0c" Nov 1 00:47:37.924989 env[1736]: time="2025-11-01T00:47:37.924373178Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:47:38.166805 env[1736]: time="2025-11-01T00:47:38.166720301Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:47:38.169583 env[1736]: time="2025-11-01T00:47:38.169510216Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:47:38.170058 kubelet[2626]: E1101 00:47:38.169988 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:47:38.170058 kubelet[2626]: E1101 00:47:38.170038 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:47:38.170467 kubelet[2626]: E1101 00:47:38.170147 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container calico-kube-controllers start failed in pod calico-kube-controllers-6c99b8d486-hs4b2_calico-system(4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:47:38.172646 kubelet[2626]: E1101 00:47:38.172593 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c99b8d486-hs4b2" podUID="4b1d53a4-89fb-4fe4-988b-0dbbdd4be6fc" Nov 1 00:47:38.839929 systemd[1]: cri-containerd-269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9.scope: Deactivated successfully. Nov 1 00:47:38.838000 audit: BPF prog-id=117 op=UNLOAD Nov 1 00:47:38.840291 systemd[1]: cri-containerd-269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9.scope: Consumed 11.175s CPU time. Nov 1 00:47:38.843021 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:47:38.843084 kernel: audit: type=1334 audit(1761958058.838:1523): prog-id=117 op=UNLOAD Nov 1 00:47:38.846000 audit: BPF prog-id=120 op=UNLOAD Nov 1 00:47:38.851829 kernel: audit: type=1334 audit(1761958058.846:1524): prog-id=120 op=UNLOAD Nov 1 00:47:38.872822 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9-rootfs.mount: Deactivated successfully. Nov 1 00:47:38.903466 env[1736]: time="2025-11-01T00:47:38.903415149Z" level=info msg="shim disconnected" id=269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9 Nov 1 00:47:38.903466 env[1736]: time="2025-11-01T00:47:38.903456867Z" level=warning msg="cleaning up after shim disconnected" id=269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9 namespace=k8s.io Nov 1 00:47:38.903466 env[1736]: time="2025-11-01T00:47:38.903465533Z" level=info msg="cleaning up dead shim" Nov 1 00:47:38.913100 env[1736]: time="2025-11-01T00:47:38.913051952Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:47:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5732 runtime=io.containerd.runc.v2\n" Nov 1 00:47:39.430165 kubelet[2626]: I1101 00:47:39.430114 2626 scope.go:117] "RemoveContainer" containerID="269a4a694a51468eaae07908e824d414082f4ebe1d3cb8de6046b0ec5e9bd7e9" Nov 1 00:47:39.448649 env[1736]: time="2025-11-01T00:47:39.448459277Z" level=info msg="CreateContainer within sandbox \"69c5f30b6194338b6baa46e635b5c2423e5e5d624c3c0d105bddf51d89e1aeac\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Nov 1 00:47:39.509265 env[1736]: time="2025-11-01T00:47:39.509193717Z" level=info msg="CreateContainer within sandbox \"69c5f30b6194338b6baa46e635b5c2423e5e5d624c3c0d105bddf51d89e1aeac\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"34d46e11ed1d0eb0b446f5b9b8c6367064bf7fb869d1416d078cdff64b4610d5\"" Nov 1 00:47:39.509774 env[1736]: time="2025-11-01T00:47:39.509722262Z" level=info msg="StartContainer for \"34d46e11ed1d0eb0b446f5b9b8c6367064bf7fb869d1416d078cdff64b4610d5\"" Nov 1 00:47:39.542964 systemd[1]: Started cri-containerd-34d46e11ed1d0eb0b446f5b9b8c6367064bf7fb869d1416d078cdff64b4610d5.scope. Nov 1 00:47:39.569029 kernel: audit: type=1400 audit(1761958059.560:1525): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.569143 kernel: audit: type=1400 audit(1761958059.560:1526): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.580206 kernel: audit: type=1400 audit(1761958059.560:1527): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.580265 kernel: audit: type=1400 audit(1761958059.560:1528): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.585982 kernel: audit: type=1400 audit(1761958059.560:1529): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.598461 kernel: audit: type=1400 audit(1761958059.560:1530): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.598586 kernel: audit: type=1400 audit(1761958059.560:1531): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.604346 kernel: audit: type=1400 audit(1761958059.560:1532): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit: BPF prog-id=204 op=LOAD Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2934 pid=5753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:39.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643436653131656431643065623062343436663562396238633633 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2934 pid=5753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:39.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643436653131656431643065623062343436663562396238633633 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.567000 audit: BPF prog-id=205 op=LOAD Nov 1 00:47:39.567000 audit[5753]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000380060 items=0 ppid=2934 pid=5753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:39.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643436653131656431643065623062343436663562396238633633 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.572000 audit: BPF prog-id=206 op=LOAD Nov 1 00:47:39.572000 audit[5753]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003800a8 items=0 ppid=2934 pid=5753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:39.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643436653131656431643065623062343436663562396238633633 Nov 1 00:47:39.590000 audit: BPF prog-id=206 op=UNLOAD Nov 1 00:47:39.590000 audit: BPF prog-id=205 op=UNLOAD Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { perfmon } for pid=5753 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit[5753]: AVC avc: denied { bpf } for pid=5753 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:39.590000 audit: BPF prog-id=207 op=LOAD Nov 1 00:47:39.590000 audit[5753]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003804b8 items=0 ppid=2934 pid=5753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:39.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643436653131656431643065623062343436663562396238633633 Nov 1 00:47:39.631850 env[1736]: time="2025-11-01T00:47:39.631802140Z" level=info msg="StartContainer for \"34d46e11ed1d0eb0b446f5b9b8c6367064bf7fb869d1416d078cdff64b4610d5\" returns successfully" Nov 1 00:47:39.897256 systemd[1]: cri-containerd-ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06.scope: Deactivated successfully. Nov 1 00:47:39.897520 systemd[1]: cri-containerd-ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06.scope: Consumed 4.050s CPU time. Nov 1 00:47:39.900000 audit: BPF prog-id=84 op=UNLOAD Nov 1 00:47:39.900000 audit: BPF prog-id=86 op=UNLOAD Nov 1 00:47:39.926090 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06-rootfs.mount: Deactivated successfully. Nov 1 00:47:39.977271 env[1736]: time="2025-11-01T00:47:39.977223915Z" level=info msg="shim disconnected" id=ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06 Nov 1 00:47:39.977271 env[1736]: time="2025-11-01T00:47:39.977270130Z" level=warning msg="cleaning up after shim disconnected" id=ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06 namespace=k8s.io Nov 1 00:47:39.977271 env[1736]: time="2025-11-01T00:47:39.977279252Z" level=info msg="cleaning up dead shim" Nov 1 00:47:39.988306 env[1736]: time="2025-11-01T00:47:39.988253049Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:47:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5795 runtime=io.containerd.runc.v2\n" Nov 1 00:47:40.421185 kubelet[2626]: I1101 00:47:40.421151 2626 scope.go:117] "RemoveContainer" containerID="ac7dadd6c27fdfba03c721519271608fee60f421380c42a71981436455b76d06" Nov 1 00:47:40.423609 env[1736]: time="2025-11-01T00:47:40.423568056Z" level=info msg="CreateContainer within sandbox \"3d647310e3cc799b47c8667ce7b5274b17d04462c646912694551140188743c1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Nov 1 00:47:40.452716 env[1736]: time="2025-11-01T00:47:40.452654097Z" level=info msg="CreateContainer within sandbox \"3d647310e3cc799b47c8667ce7b5274b17d04462c646912694551140188743c1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"488c2a36f1472ede3c8394c1e005bc262a4dc0d6887ae65c7e61268cc83ee855\"" Nov 1 00:47:40.453306 env[1736]: time="2025-11-01T00:47:40.453275633Z" level=info msg="StartContainer for \"488c2a36f1472ede3c8394c1e005bc262a4dc0d6887ae65c7e61268cc83ee855\"" Nov 1 00:47:40.487462 systemd[1]: Started cri-containerd-488c2a36f1472ede3c8394c1e005bc262a4dc0d6887ae65c7e61268cc83ee855.scope. Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit: BPF prog-id=208 op=LOAD Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2345 pid=5816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:40.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438386332613336663134373265646533633833393463316530303562 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2345 pid=5816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:40.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438386332613336663134373265646533633833393463316530303562 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.502000 audit: BPF prog-id=209 op=LOAD Nov 1 00:47:40.502000 audit[5816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001a5520 items=0 ppid=2345 pid=5816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:40.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438386332613336663134373265646533633833393463316530303562 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit: BPF prog-id=210 op=LOAD Nov 1 00:47:40.503000 audit[5816]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001a5568 items=0 ppid=2345 pid=5816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:40.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438386332613336663134373265646533633833393463316530303562 Nov 1 00:47:40.503000 audit: BPF prog-id=210 op=UNLOAD Nov 1 00:47:40.503000 audit: BPF prog-id=209 op=UNLOAD Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { perfmon } for pid=5816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit[5816]: AVC avc: denied { bpf } for pid=5816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:40.503000 audit: BPF prog-id=211 op=LOAD Nov 1 00:47:40.503000 audit[5816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0001a5978 items=0 ppid=2345 pid=5816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:40.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438386332613336663134373265646533633833393463316530303562 Nov 1 00:47:40.542723 env[1736]: time="2025-11-01T00:47:40.542644989Z" level=info msg="StartContainer for \"488c2a36f1472ede3c8394c1e005bc262a4dc0d6887ae65c7e61268cc83ee855\" returns successfully" Nov 1 00:47:40.668600 env[1736]: time="2025-11-01T00:47:40.668562016Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:47:40.904767 env[1736]: time="2025-11-01T00:47:40.904698525Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:47:40.907049 env[1736]: time="2025-11-01T00:47:40.906996833Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:47:40.907483 kubelet[2626]: E1101 00:47:40.907410 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:47:40.907483 kubelet[2626]: E1101 00:47:40.907458 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:47:40.907891 kubelet[2626]: E1101 00:47:40.907545 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container whisker start failed in pod whisker-5694757584-dtbgp_calico-system(da0b54df-6c7c-4295-a916-3e7023bdb682): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:47:40.908908 env[1736]: time="2025-11-01T00:47:40.908883779Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:47:41.149021 env[1736]: time="2025-11-01T00:47:41.148966186Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:47:41.151578 env[1736]: time="2025-11-01T00:47:41.151504057Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:47:41.152380 kubelet[2626]: E1101 00:47:41.152061 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:47:41.152380 kubelet[2626]: E1101 00:47:41.152129 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:47:41.152380 kubelet[2626]: E1101 00:47:41.152248 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container whisker-backend start failed in pod whisker-5694757584-dtbgp_calico-system(da0b54df-6c7c-4295-a916-3e7023bdb682): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:47:41.152630 kubelet[2626]: E1101 00:47:41.152317 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5694757584-dtbgp" podUID="da0b54df-6c7c-4295-a916-3e7023bdb682" Nov 1 00:47:41.669503 env[1736]: time="2025-11-01T00:47:41.669451915Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:47:41.921330 env[1736]: time="2025-11-01T00:47:41.921005996Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:47:41.923290 env[1736]: time="2025-11-01T00:47:41.923104185Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:47:41.923692 kubelet[2626]: E1101 00:47:41.923631 2626 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:47:41.924201 kubelet[2626]: E1101 00:47:41.924173 2626 kuberuntime_image.go:43] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:47:41.924420 kubelet[2626]: E1101 00:47:41.924400 2626 kuberuntime_manager.go:1449] "Unhandled Error" err="container goldmane start failed in pod goldmane-7c778bb748-5czvc_calico-system(b1382796-d43e-42cf-9f8e-009d999e587c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:47:41.924557 kubelet[2626]: E1101 00:47:41.924533 2626 pod_workers.go:1324] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-7c778bb748-5czvc" podUID="b1382796-d43e-42cf-9f8e-009d999e587c" Nov 1 00:47:42.428000 audit[5827]: AVC avc: denied { watch } for pid=5827 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521059 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:42.428000 audit[5827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0000562d0 a2=fc6 a3=0 items=0 ppid=2345 pid=5827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:47:42.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:47:42.429000 audit[5827]: AVC avc: denied { watch } for pid=5827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521053 scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:47:42.429000 audit[5827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00015a0c0 a2=fc6 a3=0 items=0 ppid=2345 pid=5827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c769 key=(null) Nov 1 00:47:42.429000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:47:43.562303 systemd[1]: cri-containerd-d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb.scope: Deactivated successfully. Nov 1 00:47:43.562632 systemd[1]: cri-containerd-d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb.scope: Consumed 3.664s CPU time. Nov 1 00:47:43.566000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:47:43.566000 audit: BPF prog-id=104 op=UNLOAD Nov 1 00:47:43.589953 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb-rootfs.mount: Deactivated successfully. Nov 1 00:47:43.640920 env[1736]: time="2025-11-01T00:47:43.640778503Z" level=info msg="shim disconnected" id=d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb Nov 1 00:47:43.640920 env[1736]: time="2025-11-01T00:47:43.640834707Z" level=warning msg="cleaning up after shim disconnected" id=d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb namespace=k8s.io Nov 1 00:47:43.640920 env[1736]: time="2025-11-01T00:47:43.640845947Z" level=info msg="cleaning up dead shim" Nov 1 00:47:43.650793 env[1736]: time="2025-11-01T00:47:43.650708753Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:47:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5857 runtime=io.containerd.runc.v2\n" Nov 1 00:47:43.940719 kubelet[2626]: E1101 00:47:43.940588 2626 controller.go:195] "Failed to update lease" err="Put \"https://172.31.16.197:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-197?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Nov 1 00:47:44.435621 kubelet[2626]: I1101 00:47:44.435581 2626 scope.go:117] "RemoveContainer" containerID="d14ce65a7098ec7d61de90a9a11172f00c33d8bde71ceee7cf5d9687a48d9fcb" Nov 1 00:47:44.437991 env[1736]: time="2025-11-01T00:47:44.437949962Z" level=info msg="CreateContainer within sandbox \"478944cefac97a3dc28ba066899c3152c6e8133f0e8281d24077972bdf703ef1\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Nov 1 00:47:44.457188 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount367118686.mount: Deactivated successfully. Nov 1 00:47:44.469212 env[1736]: time="2025-11-01T00:47:44.469145825Z" level=info msg="CreateContainer within sandbox \"478944cefac97a3dc28ba066899c3152c6e8133f0e8281d24077972bdf703ef1\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"a995ab20cb594c68d10b91272418b943f8c686ad7571598c042d5b039c98f465\"" Nov 1 00:47:44.469730 env[1736]: time="2025-11-01T00:47:44.469707759Z" level=info msg="StartContainer for \"a995ab20cb594c68d10b91272418b943f8c686ad7571598c042d5b039c98f465\"" Nov 1 00:47:44.491193 systemd[1]: Started cri-containerd-a995ab20cb594c68d10b91272418b943f8c686ad7571598c042d5b039c98f465.scope. Nov 1 00:47:44.519434 kernel: kauditd_printk_skb: 116 callbacks suppressed Nov 1 00:47:44.519614 kernel: audit: type=1400 audit(1761958064.508:1567): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.532094 kernel: audit: type=1400 audit(1761958064.508:1568): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.532208 kernel: audit: type=1400 audit(1761958064.508:1569): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.539119 kernel: audit: type=1400 audit(1761958064.508:1570): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.547330 kernel: audit: type=1400 audit(1761958064.508:1571): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.555097 kernel: audit: type=1400 audit(1761958064.508:1572): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.562683 kernel: audit: type=1400 audit(1761958064.508:1573): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.569871 kernel: audit: type=1400 audit(1761958064.508:1574): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.586237 kernel: audit: type=1400 audit(1761958064.508:1575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.586362 kernel: audit: type=1400 audit(1761958064.509:1576): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.509000 audit: BPF prog-id=212 op=LOAD Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2311 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:44.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139393561623230636235393463363864313062393132373234313862 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2311 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:44.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139393561623230636235393463363864313062393132373234313862 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.511000 audit: BPF prog-id=213 op=LOAD Nov 1 00:47:44.511000 audit[5879]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000213300 items=0 ppid=2311 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:44.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139393561623230636235393463363864313062393132373234313862 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.517000 audit: BPF prog-id=214 op=LOAD Nov 1 00:47:44.517000 audit[5879]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000213348 items=0 ppid=2311 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:44.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139393561623230636235393463363864313062393132373234313862 Nov 1 00:47:44.517000 audit: BPF prog-id=214 op=UNLOAD Nov 1 00:47:44.517000 audit: BPF prog-id=213 op=UNLOAD Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { perfmon } for pid=5879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit[5879]: AVC avc: denied { bpf } for pid=5879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:47:44.518000 audit: BPF prog-id=215 op=LOAD Nov 1 00:47:44.518000 audit[5879]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000213758 items=0 ppid=2311 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:47:44.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139393561623230636235393463363864313062393132373234313862 Nov 1 00:47:44.602030 env[1736]: time="2025-11-01T00:47:44.601682143Z" level=info msg="StartContainer for \"a995ab20cb594c68d10b91272418b943f8c686ad7571598c042d5b039c98f465\" returns successfully"