Nov 1 00:41:10.039354 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Oct 31 23:02:53 -00 2025 Nov 1 00:41:10.039376 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:41:10.039385 kernel: BIOS-provided physical RAM map: Nov 1 00:41:10.039391 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Nov 1 00:41:10.039399 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Nov 1 00:41:10.039405 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Nov 1 00:41:10.039414 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Nov 1 00:41:10.039422 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Nov 1 00:41:10.039429 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Nov 1 00:41:10.039434 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Nov 1 00:41:10.039441 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Nov 1 00:41:10.039449 kernel: printk: bootconsole [earlyser0] enabled Nov 1 00:41:10.039454 kernel: NX (Execute Disable) protection: active Nov 1 00:41:10.039460 kernel: efi: EFI v2.70 by Microsoft Nov 1 00:41:10.039473 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5c8a98 RNG=0x3ffd1018 Nov 1 00:41:10.039480 kernel: random: crng init done Nov 1 00:41:10.039487 kernel: SMBIOS 3.1.0 present. Nov 1 00:41:10.039496 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 03/08/2024 Nov 1 00:41:10.039502 kernel: Hypervisor detected: Microsoft Hyper-V Nov 1 00:41:10.039508 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Nov 1 00:41:10.039517 kernel: Hyper-V Host Build:20348-10.0-1-0.1827 Nov 1 00:41:10.039523 kernel: Hyper-V: Nested features: 0x1e0101 Nov 1 00:41:10.039532 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Nov 1 00:41:10.039540 kernel: Hyper-V: Using hypercall for remote TLB flush Nov 1 00:41:10.039546 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Nov 1 00:41:10.039553 kernel: tsc: Marking TSC unstable due to running on Hyper-V Nov 1 00:41:10.039563 kernel: tsc: Detected 2593.905 MHz processor Nov 1 00:41:10.039569 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Nov 1 00:41:10.039579 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Nov 1 00:41:10.039586 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Nov 1 00:41:10.039595 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Nov 1 00:41:10.039602 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Nov 1 00:41:10.039612 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Nov 1 00:41:10.039619 kernel: Using GB pages for direct mapping Nov 1 00:41:10.039627 kernel: Secure boot disabled Nov 1 00:41:10.039636 kernel: ACPI: Early table checksum verification disabled Nov 1 00:41:10.039643 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Nov 1 00:41:10.039649 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039659 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039669 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Nov 1 00:41:10.039683 kernel: ACPI: FACS 0x000000003FFFE000 000040 Nov 1 00:41:10.039690 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039699 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039707 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039714 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039723 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039733 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039740 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:41:10.039750 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Nov 1 00:41:10.039757 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Nov 1 00:41:10.039764 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Nov 1 00:41:10.039774 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Nov 1 00:41:10.039781 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Nov 1 00:41:10.039789 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Nov 1 00:41:10.039799 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Nov 1 00:41:10.039806 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Nov 1 00:41:10.039815 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Nov 1 00:41:10.039823 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Nov 1 00:41:10.039830 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Nov 1 00:41:10.039840 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Nov 1 00:41:10.039847 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Nov 1 00:41:10.039854 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Nov 1 00:41:10.039864 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Nov 1 00:41:10.039872 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Nov 1 00:41:10.039881 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Nov 1 00:41:10.039889 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Nov 1 00:41:10.039896 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Nov 1 00:41:10.039905 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Nov 1 00:41:10.039913 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Nov 1 00:41:10.039920 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Nov 1 00:41:10.039930 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Nov 1 00:41:10.039937 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Nov 1 00:41:10.039947 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Nov 1 00:41:10.039956 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Nov 1 00:41:10.039963 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Nov 1 00:41:10.039971 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Nov 1 00:41:10.039980 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Nov 1 00:41:10.039988 kernel: NODE_DATA(0) allocated [mem 0x2bfff9000-0x2bfffefff] Nov 1 00:41:10.039997 kernel: Zone ranges: Nov 1 00:41:10.040006 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Nov 1 00:41:10.040014 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Nov 1 00:41:10.040025 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Nov 1 00:41:10.040033 kernel: Movable zone start for each node Nov 1 00:41:10.040041 kernel: Early memory node ranges Nov 1 00:41:10.040051 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Nov 1 00:41:10.040058 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Nov 1 00:41:10.040065 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Nov 1 00:41:10.040075 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Nov 1 00:41:10.040082 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Nov 1 00:41:10.040089 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Nov 1 00:41:10.040100 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Nov 1 00:41:10.040107 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Nov 1 00:41:10.040116 kernel: ACPI: PM-Timer IO Port: 0x408 Nov 1 00:41:10.040124 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Nov 1 00:41:10.040134 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Nov 1 00:41:10.040142 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Nov 1 00:41:10.040152 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Nov 1 00:41:10.040162 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Nov 1 00:41:10.040170 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Nov 1 00:41:10.040184 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Nov 1 00:41:10.040201 kernel: Booting paravirtualized kernel on Hyper-V Nov 1 00:41:10.042237 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Nov 1 00:41:10.042252 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Nov 1 00:41:10.042266 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Nov 1 00:41:10.042279 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Nov 1 00:41:10.042291 kernel: pcpu-alloc: [0] 0 1 Nov 1 00:41:10.042304 kernel: Hyper-V: PV spinlocks enabled Nov 1 00:41:10.042317 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Nov 1 00:41:10.042334 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Nov 1 00:41:10.042346 kernel: Policy zone: Normal Nov 1 00:41:10.042361 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:41:10.042374 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:41:10.042387 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Nov 1 00:41:10.042400 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:41:10.042413 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:41:10.042427 kernel: Memory: 8071672K/8387460K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47496K init, 4084K bss, 315528K reserved, 0K cma-reserved) Nov 1 00:41:10.042442 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Nov 1 00:41:10.042456 kernel: ftrace: allocating 34614 entries in 136 pages Nov 1 00:41:10.042477 kernel: ftrace: allocated 136 pages with 2 groups Nov 1 00:41:10.042493 kernel: rcu: Hierarchical RCU implementation. Nov 1 00:41:10.042507 kernel: rcu: RCU event tracing is enabled. Nov 1 00:41:10.042521 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Nov 1 00:41:10.042535 kernel: Rude variant of Tasks RCU enabled. Nov 1 00:41:10.042549 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:41:10.042562 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:41:10.042575 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Nov 1 00:41:10.042589 kernel: Using NULL legacy PIC Nov 1 00:41:10.042605 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Nov 1 00:41:10.042619 kernel: Console: colour dummy device 80x25 Nov 1 00:41:10.042633 kernel: printk: console [tty1] enabled Nov 1 00:41:10.042646 kernel: printk: console [ttyS0] enabled Nov 1 00:41:10.042660 kernel: printk: bootconsole [earlyser0] disabled Nov 1 00:41:10.042676 kernel: ACPI: Core revision 20210730 Nov 1 00:41:10.042689 kernel: Failed to register legacy timer interrupt Nov 1 00:41:10.042703 kernel: APIC: Switch to symmetric I/O mode setup Nov 1 00:41:10.042716 kernel: Hyper-V: Using IPI hypercalls Nov 1 00:41:10.042731 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Nov 1 00:41:10.042744 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Nov 1 00:41:10.042758 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Nov 1 00:41:10.042772 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Nov 1 00:41:10.042785 kernel: Spectre V2 : Mitigation: Retpolines Nov 1 00:41:10.042798 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Nov 1 00:41:10.042814 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Nov 1 00:41:10.042828 kernel: RETBleed: Vulnerable Nov 1 00:41:10.042842 kernel: Speculative Store Bypass: Vulnerable Nov 1 00:41:10.042855 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Nov 1 00:41:10.042868 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Nov 1 00:41:10.042882 kernel: active return thunk: its_return_thunk Nov 1 00:41:10.042895 kernel: ITS: Mitigation: Aligned branch/return thunks Nov 1 00:41:10.042908 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Nov 1 00:41:10.042922 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Nov 1 00:41:10.042936 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Nov 1 00:41:10.042951 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Nov 1 00:41:10.042965 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Nov 1 00:41:10.042978 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Nov 1 00:41:10.042992 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Nov 1 00:41:10.043005 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Nov 1 00:41:10.043018 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Nov 1 00:41:10.043031 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Nov 1 00:41:10.043045 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Nov 1 00:41:10.043058 kernel: Freeing SMP alternatives memory: 32K Nov 1 00:41:10.043072 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:41:10.043085 kernel: LSM: Security Framework initializing Nov 1 00:41:10.043098 kernel: SELinux: Initializing. Nov 1 00:41:10.043115 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Nov 1 00:41:10.043128 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Nov 1 00:41:10.043142 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Nov 1 00:41:10.043155 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Nov 1 00:41:10.043169 kernel: signal: max sigframe size: 3632 Nov 1 00:41:10.043183 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:41:10.043207 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Nov 1 00:41:10.043221 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:41:10.043234 kernel: x86: Booting SMP configuration: Nov 1 00:41:10.043248 kernel: .... node #0, CPUs: #1 Nov 1 00:41:10.043264 kernel: Transient Scheduler Attacks: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Nov 1 00:41:10.043279 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Nov 1 00:41:10.043292 kernel: smp: Brought up 1 node, 2 CPUs Nov 1 00:41:10.043306 kernel: smpboot: Max logical packages: 1 Nov 1 00:41:10.043320 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Nov 1 00:41:10.043333 kernel: devtmpfs: initialized Nov 1 00:41:10.043347 kernel: x86/mm: Memory block size: 128MB Nov 1 00:41:10.043360 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Nov 1 00:41:10.043377 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:41:10.043390 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Nov 1 00:41:10.043404 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:41:10.043417 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:41:10.043431 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:41:10.043445 kernel: audit: type=2000 audit(1761957669.023:1): state=initialized audit_enabled=0 res=1 Nov 1 00:41:10.043458 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:41:10.043472 kernel: thermal_sys: Registered thermal governor 'user_space' Nov 1 00:41:10.043485 kernel: cpuidle: using governor menu Nov 1 00:41:10.043501 kernel: ACPI: bus type PCI registered Nov 1 00:41:10.043515 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:41:10.043528 kernel: dca service started, version 1.12.1 Nov 1 00:41:10.043542 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Nov 1 00:41:10.043556 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:41:10.043569 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:41:10.043583 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:41:10.043596 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:41:10.043610 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:41:10.043625 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:41:10.043639 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:41:10.043652 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:41:10.043666 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:41:10.043680 kernel: ACPI: Interpreter enabled Nov 1 00:41:10.043694 kernel: ACPI: PM: (supports S0 S5) Nov 1 00:41:10.043707 kernel: ACPI: Using IOAPIC for interrupt routing Nov 1 00:41:10.043721 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Nov 1 00:41:10.043734 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Nov 1 00:41:10.043750 kernel: iommu: Default domain type: Translated Nov 1 00:41:10.043764 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Nov 1 00:41:10.043778 kernel: vgaarb: loaded Nov 1 00:41:10.043791 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:41:10.043805 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:41:10.043818 kernel: PTP clock support registered Nov 1 00:41:10.043832 kernel: Registered efivars operations Nov 1 00:41:10.043846 kernel: PCI: Using ACPI for IRQ routing Nov 1 00:41:10.043859 kernel: PCI: System does not support PCI Nov 1 00:41:10.043875 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Nov 1 00:41:10.043888 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:41:10.043902 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:41:10.043916 kernel: pnp: PnP ACPI init Nov 1 00:41:10.043929 kernel: pnp: PnP ACPI: found 3 devices Nov 1 00:41:10.043943 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Nov 1 00:41:10.043957 kernel: NET: Registered PF_INET protocol family Nov 1 00:41:10.043970 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Nov 1 00:41:10.043985 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Nov 1 00:41:10.044001 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:41:10.044015 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:41:10.044028 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Nov 1 00:41:10.044042 kernel: TCP: Hash tables configured (established 65536 bind 65536) Nov 1 00:41:10.044055 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Nov 1 00:41:10.044069 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Nov 1 00:41:10.044083 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:41:10.044097 kernel: NET: Registered PF_XDP protocol family Nov 1 00:41:10.044110 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:41:10.044126 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Nov 1 00:41:10.044151 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Nov 1 00:41:10.044165 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Nov 1 00:41:10.044178 kernel: Initialise system trusted keyrings Nov 1 00:41:10.044191 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Nov 1 00:41:10.044212 kernel: Key type asymmetric registered Nov 1 00:41:10.044225 kernel: Asymmetric key parser 'x509' registered Nov 1 00:41:10.044238 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:41:10.044251 kernel: io scheduler mq-deadline registered Nov 1 00:41:10.044267 kernel: io scheduler kyber registered Nov 1 00:41:10.044280 kernel: io scheduler bfq registered Nov 1 00:41:10.044294 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Nov 1 00:41:10.044307 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:41:10.044320 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Nov 1 00:41:10.044334 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Nov 1 00:41:10.044347 kernel: i8042: PNP: No PS/2 controller found. Nov 1 00:41:10.044497 kernel: rtc_cmos 00:02: registered as rtc0 Nov 1 00:41:10.044613 kernel: rtc_cmos 00:02: setting system clock to 2025-11-01T00:41:09 UTC (1761957669) Nov 1 00:41:10.044721 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Nov 1 00:41:10.044738 kernel: intel_pstate: CPU model not supported Nov 1 00:41:10.044751 kernel: efifb: probing for efifb Nov 1 00:41:10.044765 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Nov 1 00:41:10.044778 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Nov 1 00:41:10.044791 kernel: efifb: scrolling: redraw Nov 1 00:41:10.044805 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Nov 1 00:41:10.044818 kernel: Console: switching to colour frame buffer device 128x48 Nov 1 00:41:10.044833 kernel: fb0: EFI VGA frame buffer device Nov 1 00:41:10.044846 kernel: pstore: Registered efi as persistent store backend Nov 1 00:41:10.044859 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:41:10.044872 kernel: Segment Routing with IPv6 Nov 1 00:41:10.044885 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:41:10.044898 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:41:10.044911 kernel: Key type dns_resolver registered Nov 1 00:41:10.044924 kernel: IPI shorthand broadcast: enabled Nov 1 00:41:10.044937 kernel: sched_clock: Marking stable (766308300, 22221600)->(986577500, -198047600) Nov 1 00:41:10.044952 kernel: registered taskstats version 1 Nov 1 00:41:10.044965 kernel: Loading compiled-in X.509 certificates Nov 1 00:41:10.044978 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: f2055682e6899ad8548fd369019e7b47939b46a0' Nov 1 00:41:10.044991 kernel: Key type .fscrypt registered Nov 1 00:41:10.045004 kernel: Key type fscrypt-provisioning registered Nov 1 00:41:10.045017 kernel: pstore: Using crash dump compression: deflate Nov 1 00:41:10.045031 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:41:10.045044 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:41:10.045059 kernel: ima: No architecture policies found Nov 1 00:41:10.045073 kernel: clk: Disabling unused clocks Nov 1 00:41:10.045086 kernel: Freeing unused kernel image (initmem) memory: 47496K Nov 1 00:41:10.045099 kernel: Write protecting the kernel read-only data: 28672k Nov 1 00:41:10.045112 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Nov 1 00:41:10.045125 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Nov 1 00:41:10.045139 kernel: Run /init as init process Nov 1 00:41:10.045152 kernel: with arguments: Nov 1 00:41:10.045165 kernel: /init Nov 1 00:41:10.045178 kernel: with environment: Nov 1 00:41:10.045201 kernel: HOME=/ Nov 1 00:41:10.047230 kernel: TERM=linux Nov 1 00:41:10.047244 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:41:10.047256 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:41:10.047267 systemd[1]: Detected virtualization microsoft. Nov 1 00:41:10.047276 systemd[1]: Detected architecture x86-64. Nov 1 00:41:10.047286 systemd[1]: Running in initrd. Nov 1 00:41:10.047297 systemd[1]: No hostname configured, using default hostname. Nov 1 00:41:10.047308 systemd[1]: Hostname set to . Nov 1 00:41:10.047318 systemd[1]: Initializing machine ID from random generator. Nov 1 00:41:10.047327 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:41:10.047339 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:41:10.047347 systemd[1]: Reached target cryptsetup.target. Nov 1 00:41:10.047359 systemd[1]: Reached target paths.target. Nov 1 00:41:10.047368 systemd[1]: Reached target slices.target. Nov 1 00:41:10.047378 systemd[1]: Reached target swap.target. Nov 1 00:41:10.047390 systemd[1]: Reached target timers.target. Nov 1 00:41:10.047399 systemd[1]: Listening on iscsid.socket. Nov 1 00:41:10.047411 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:41:10.047419 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:41:10.047431 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:41:10.047444 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:41:10.047455 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:41:10.047472 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:41:10.047485 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:41:10.047497 systemd[1]: Reached target sockets.target. Nov 1 00:41:10.047510 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:41:10.047520 systemd[1]: Finished network-cleanup.service. Nov 1 00:41:10.047528 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:41:10.047536 systemd[1]: Starting systemd-journald.service... Nov 1 00:41:10.047543 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:41:10.047554 systemd[1]: Starting systemd-resolved.service... Nov 1 00:41:10.047565 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:41:10.047575 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:41:10.047585 kernel: audit: type=1130 audit(1761957670.047:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.047598 systemd-journald[183]: Journal started Nov 1 00:41:10.047652 systemd-journald[183]: Runtime Journal (/run/log/journal/fcbfc7c5f4574bf9be2d1dd8ad144446) is 8.0M, max 159.0M, 151.0M free. Nov 1 00:41:10.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.026226 systemd-modules-load[184]: Inserted module 'overlay' Nov 1 00:41:10.064455 systemd[1]: Started systemd-journald.service. Nov 1 00:41:10.066460 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:41:10.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.081292 kernel: audit: type=1130 audit(1761957670.065:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.105209 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:41:10.105258 kernel: audit: type=1130 audit(1761957670.094:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.094518 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:41:10.110766 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:41:10.115592 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:41:10.128085 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:41:10.148145 kernel: Bridge firewalling registered Nov 1 00:41:10.148185 kernel: audit: type=1130 audit(1761957670.109:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.148805 systemd-modules-load[184]: Inserted module 'br_netfilter' Nov 1 00:41:10.161467 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:41:10.175353 kernel: audit: type=1130 audit(1761957670.127:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.173969 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:41:10.186367 systemd-resolved[185]: Positive Trust Anchors: Nov 1 00:41:10.188644 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:41:10.213505 kernel: audit: type=1130 audit(1761957670.172:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.213534 kernel: SCSI subsystem initialized Nov 1 00:41:10.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.213616 dracut-cmdline[201]: dracut-dracut-053 Nov 1 00:41:10.206958 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:41:10.211109 systemd-resolved[185]: Defaulting to hostname 'linux'. Nov 1 00:41:10.232203 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:41:10.211991 systemd[1]: Started systemd-resolved.service. Nov 1 00:41:10.275432 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:41:10.275459 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:41:10.275477 kernel: audit: type=1130 audit(1761957670.258:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.275493 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:41:10.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.258536 systemd[1]: Reached target nss-lookup.target. Nov 1 00:41:10.283272 systemd-modules-load[184]: Inserted module 'dm_multipath' Nov 1 00:41:10.285173 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:41:10.303841 kernel: audit: type=1130 audit(1761957670.290:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.302841 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:41:10.311975 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:41:10.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.327252 kernel: audit: type=1130 audit(1761957670.314:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.367217 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:41:10.385218 kernel: iscsi: registered transport (tcp) Nov 1 00:41:10.413862 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:41:10.413936 kernel: QLogic iSCSI HBA Driver Nov 1 00:41:10.443689 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:41:10.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.446729 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:41:10.498216 kernel: raid6: avx512x4 gen() 18473 MB/s Nov 1 00:41:10.518207 kernel: raid6: avx512x4 xor() 8039 MB/s Nov 1 00:41:10.538203 kernel: raid6: avx512x2 gen() 18465 MB/s Nov 1 00:41:10.558207 kernel: raid6: avx512x2 xor() 29721 MB/s Nov 1 00:41:10.578203 kernel: raid6: avx512x1 gen() 18388 MB/s Nov 1 00:41:10.598203 kernel: raid6: avx512x1 xor() 26819 MB/s Nov 1 00:41:10.619210 kernel: raid6: avx2x4 gen() 18288 MB/s Nov 1 00:41:10.639208 kernel: raid6: avx2x4 xor() 7736 MB/s Nov 1 00:41:10.659208 kernel: raid6: avx2x2 gen() 18338 MB/s Nov 1 00:41:10.679209 kernel: raid6: avx2x2 xor() 22182 MB/s Nov 1 00:41:10.699207 kernel: raid6: avx2x1 gen() 14225 MB/s Nov 1 00:41:10.719205 kernel: raid6: avx2x1 xor() 19442 MB/s Nov 1 00:41:10.739209 kernel: raid6: sse2x4 gen() 11708 MB/s Nov 1 00:41:10.759205 kernel: raid6: sse2x4 xor() 7412 MB/s Nov 1 00:41:10.779206 kernel: raid6: sse2x2 gen() 12911 MB/s Nov 1 00:41:10.799210 kernel: raid6: sse2x2 xor() 7495 MB/s Nov 1 00:41:10.819207 kernel: raid6: sse2x1 gen() 11664 MB/s Nov 1 00:41:10.842755 kernel: raid6: sse2x1 xor() 5911 MB/s Nov 1 00:41:10.842785 kernel: raid6: using algorithm avx512x4 gen() 18473 MB/s Nov 1 00:41:10.842799 kernel: raid6: .... xor() 8039 MB/s, rmw enabled Nov 1 00:41:10.850045 kernel: raid6: using avx512x2 recovery algorithm Nov 1 00:41:10.866212 kernel: xor: automatically using best checksumming function avx Nov 1 00:41:10.963219 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Nov 1 00:41:10.971832 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:41:10.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:10.976000 audit: BPF prog-id=7 op=LOAD Nov 1 00:41:10.976000 audit: BPF prog-id=8 op=LOAD Nov 1 00:41:10.976793 systemd[1]: Starting systemd-udevd.service... Nov 1 00:41:10.990577 systemd-udevd[384]: Using default interface naming scheme 'v252'. Nov 1 00:41:10.995135 systemd[1]: Started systemd-udevd.service. Nov 1 00:41:11.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:11.006187 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:41:11.020841 dracut-pre-trigger[405]: rd.md=0: removing MD RAID activation Nov 1 00:41:11.052136 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:41:11.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:11.055406 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:41:11.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:11.091012 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:41:11.142216 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:41:11.175730 kernel: AVX2 version of gcm_enc/dec engaged. Nov 1 00:41:11.175793 kernel: hv_vmbus: Vmbus version:5.2 Nov 1 00:41:11.175811 kernel: AES CTR mode by8 optimization enabled Nov 1 00:41:11.198213 kernel: hid: raw HID events driver (C) Jiri Kosina Nov 1 00:41:11.212222 kernel: hv_vmbus: registering driver hyperv_keyboard Nov 1 00:41:11.212270 kernel: hv_vmbus: registering driver hid_hyperv Nov 1 00:41:11.218633 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Nov 1 00:41:11.224262 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Nov 1 00:41:11.224434 kernel: hv_vmbus: registering driver hv_netvsc Nov 1 00:41:11.239211 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Nov 1 00:41:11.251438 kernel: hv_vmbus: registering driver hv_storvsc Nov 1 00:41:11.258515 kernel: scsi host1: storvsc_host_t Nov 1 00:41:11.258739 kernel: scsi host0: storvsc_host_t Nov 1 00:41:11.265217 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Nov 1 00:41:11.271213 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Nov 1 00:41:11.294978 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Nov 1 00:41:11.300683 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Nov 1 00:41:11.300705 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Nov 1 00:41:11.325048 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Nov 1 00:41:11.325169 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Nov 1 00:41:11.325346 kernel: sd 0:0:0:0: [sda] Write Protect is off Nov 1 00:41:11.325514 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Nov 1 00:41:11.325682 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Nov 1 00:41:11.325846 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:41:11.325873 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Nov 1 00:41:11.466209 kernel: hv_netvsc 7ced8d3a-6eb6-7ced-8d3a-6eb67ced8d3a eth0: VF slot 1 added Nov 1 00:41:11.482800 kernel: hv_vmbus: registering driver hv_pci Nov 1 00:41:11.482850 kernel: hv_pci ef7f38cf-998e-42e8-89b1-a5f80d7d8ade: PCI VMBus probing: Using version 0x10004 Nov 1 00:41:11.541983 kernel: hv_pci ef7f38cf-998e-42e8-89b1-a5f80d7d8ade: PCI host bridge to bus 998e:00 Nov 1 00:41:11.542365 kernel: pci_bus 998e:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Nov 1 00:41:11.542544 kernel: pci_bus 998e:00: No busn resource found for root bus, will use [bus 00-ff] Nov 1 00:41:11.542698 kernel: pci 998e:00:02.0: [15b3:1016] type 00 class 0x020000 Nov 1 00:41:11.542877 kernel: pci 998e:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Nov 1 00:41:11.543043 kernel: pci 998e:00:02.0: enabling Extended Tags Nov 1 00:41:11.543218 kernel: pci 998e:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 998e:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Nov 1 00:41:11.543387 kernel: pci_bus 998e:00: busn_res: [bus 00-ff] end is updated to 00 Nov 1 00:41:11.543537 kernel: pci 998e:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Nov 1 00:41:11.634888 kernel: mlx5_core 998e:00:02.0: enabling device (0000 -> 0002) Nov 1 00:41:11.903369 kernel: mlx5_core 998e:00:02.0: firmware version: 14.30.5006 Nov 1 00:41:11.903539 kernel: mlx5_core 998e:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Nov 1 00:41:11.903643 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (435) Nov 1 00:41:11.903654 kernel: mlx5_core 998e:00:02.0: Supported tc offload range - chains: 1, prios: 1 Nov 1 00:41:11.903752 kernel: mlx5_core 998e:00:02.0: mlx5e_tc_post_act_init:40:(pid 16): firmware level support is missing Nov 1 00:41:11.903852 kernel: hv_netvsc 7ced8d3a-6eb6-7ced-8d3a-6eb67ced8d3a eth0: VF registering: eth1 Nov 1 00:41:11.903952 kernel: mlx5_core 998e:00:02.0 eth1: joined to eth0 Nov 1 00:41:11.808273 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:41:11.884663 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:41:11.917214 kernel: mlx5_core 998e:00:02.0 enP39310s1: renamed from eth1 Nov 1 00:41:12.020362 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:41:12.026337 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:41:12.033978 systemd[1]: Starting disk-uuid.service... Nov 1 00:41:12.043586 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:41:12.059217 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:41:12.072224 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:41:12.081207 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:41:13.083397 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:41:13.083464 disk-uuid[563]: The operation has completed successfully. Nov 1 00:41:13.162635 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:41:13.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.162744 systemd[1]: Finished disk-uuid.service. Nov 1 00:41:13.177156 systemd[1]: Starting verity-setup.service... Nov 1 00:41:13.213321 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Nov 1 00:41:13.506874 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:41:13.513142 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:41:13.517155 systemd[1]: Finished verity-setup.service. Nov 1 00:41:13.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.601217 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:41:13.602028 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:41:13.605775 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:41:13.609785 systemd[1]: Starting ignition-setup.service... Nov 1 00:41:13.612885 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:41:13.641530 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:41:13.641588 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:41:13.641608 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:41:13.680855 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:41:13.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.686000 audit: BPF prog-id=9 op=LOAD Nov 1 00:41:13.687075 systemd[1]: Starting systemd-networkd.service... Nov 1 00:41:13.710282 systemd-networkd[827]: lo: Link UP Nov 1 00:41:13.710291 systemd-networkd[827]: lo: Gained carrier Nov 1 00:41:13.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.711182 systemd-networkd[827]: Enumeration completed Nov 1 00:41:13.711276 systemd[1]: Started systemd-networkd.service. Nov 1 00:41:13.714258 systemd[1]: Reached target network.target. Nov 1 00:41:13.717880 systemd-networkd[827]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:41:13.726296 systemd[1]: Starting iscsiuio.service... Nov 1 00:41:13.729621 systemd[1]: Started iscsiuio.service. Nov 1 00:41:13.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.733897 systemd[1]: Starting iscsid.service... Nov 1 00:41:13.740859 iscsid[834]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:41:13.740859 iscsid[834]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:41:13.740859 iscsid[834]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:41:13.740859 iscsid[834]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:41:13.762274 iscsid[834]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:41:13.762274 iscsid[834]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:41:13.772862 systemd[1]: Started iscsid.service. Nov 1 00:41:13.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.775528 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:41:13.788222 kernel: mlx5_core 998e:00:02.0 enP39310s1: Link up Nov 1 00:41:13.788412 kernel: buffer_size[0]=0 is not enough for lossless buffer Nov 1 00:41:13.789716 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:41:13.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.795633 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:41:13.799590 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:41:13.803973 systemd[1]: Reached target remote-fs.target. Nov 1 00:41:13.808478 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:41:13.816461 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:41:13.828299 kernel: hv_netvsc 7ced8d3a-6eb6-7ced-8d3a-6eb67ced8d3a eth0: Data path switched to VF: enP39310s1 Nov 1 00:41:13.828487 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:41:13.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:13.828667 systemd-networkd[827]: enP39310s1: Link UP Nov 1 00:41:13.828938 systemd-networkd[827]: eth0: Link UP Nov 1 00:41:13.829410 systemd-networkd[827]: eth0: Gained carrier Nov 1 00:41:13.832769 systemd-networkd[827]: enP39310s1: Gained carrier Nov 1 00:41:13.851150 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:41:13.851274 systemd-networkd[827]: eth0: DHCPv4 address 10.200.4.5/24, gateway 10.200.4.1 acquired from 168.63.129.16 Nov 1 00:41:14.063763 systemd[1]: Finished ignition-setup.service. Nov 1 00:41:14.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:14.065813 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:41:14.919419 systemd-networkd[827]: eth0: Gained IPv6LL Nov 1 00:41:17.693685 ignition[854]: Ignition 2.14.0 Nov 1 00:41:17.693702 ignition[854]: Stage: fetch-offline Nov 1 00:41:17.693799 ignition[854]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:41:17.693850 ignition[854]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:41:17.798131 ignition[854]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:41:17.798344 ignition[854]: parsed url from cmdline: "" Nov 1 00:41:17.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:17.799646 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:41:17.824909 kernel: kauditd_printk_skb: 18 callbacks suppressed Nov 1 00:41:17.824933 kernel: audit: type=1130 audit(1761957677.804:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:17.798349 ignition[854]: no config URL provided Nov 1 00:41:17.805599 systemd[1]: Starting ignition-fetch.service... Nov 1 00:41:17.798355 ignition[854]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:41:17.798363 ignition[854]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:41:17.798370 ignition[854]: failed to fetch config: resource requires networking Nov 1 00:41:17.798600 ignition[854]: Ignition finished successfully Nov 1 00:41:17.814399 ignition[860]: Ignition 2.14.0 Nov 1 00:41:17.814405 ignition[860]: Stage: fetch Nov 1 00:41:17.814538 ignition[860]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:41:17.814564 ignition[860]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:41:17.820983 ignition[860]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:41:17.821113 ignition[860]: parsed url from cmdline: "" Nov 1 00:41:17.821117 ignition[860]: no config URL provided Nov 1 00:41:17.821124 ignition[860]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:41:17.821131 ignition[860]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:41:17.821161 ignition[860]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Nov 1 00:41:17.892656 ignition[860]: GET result: OK Nov 1 00:41:17.892763 ignition[860]: config has been read from IMDS userdata Nov 1 00:41:17.892801 ignition[860]: parsing config with SHA512: b42600dd8de04d91cf3661b3e752973d9ed4504006fa9b655e1cea1b3711aa61043a0bfb6a144cc8085ca0fecdbd2b2ebeeb1b006de77bf269cccaa4347d1503 Nov 1 00:41:17.896822 unknown[860]: fetched base config from "system" Nov 1 00:41:17.896836 unknown[860]: fetched base config from "system" Nov 1 00:41:17.896862 unknown[860]: fetched user config from "azure" Nov 1 00:41:17.903253 ignition[860]: fetch: fetch complete Nov 1 00:41:17.903263 ignition[860]: fetch: fetch passed Nov 1 00:41:17.903314 ignition[860]: Ignition finished successfully Nov 1 00:41:17.909419 systemd[1]: Finished ignition-fetch.service. Nov 1 00:41:17.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:17.923741 systemd[1]: Starting ignition-kargs.service... Nov 1 00:41:17.927284 kernel: audit: type=1130 audit(1761957677.911:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:17.936268 ignition[866]: Ignition 2.14.0 Nov 1 00:41:17.936279 ignition[866]: Stage: kargs Nov 1 00:41:17.936427 ignition[866]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:41:17.936460 ignition[866]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:41:17.945375 ignition[866]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:41:17.950141 ignition[866]: kargs: kargs passed Nov 1 00:41:17.950189 ignition[866]: Ignition finished successfully Nov 1 00:41:17.954024 systemd[1]: Finished ignition-kargs.service. Nov 1 00:41:17.958423 systemd[1]: Starting ignition-disks.service... Nov 1 00:41:17.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:17.968154 ignition[872]: Ignition 2.14.0 Nov 1 00:41:17.980035 kernel: audit: type=1130 audit(1761957677.957:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:17.977383 systemd[1]: Finished ignition-disks.service. Nov 1 00:41:17.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:17.968161 ignition[872]: Stage: disks Nov 1 00:41:17.997281 kernel: audit: type=1130 audit(1761957677.979:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:17.980119 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:41:17.968285 ignition[872]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:41:17.993880 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:41:17.968309 ignition[872]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:41:17.997265 systemd[1]: Reached target local-fs.target. Nov 1 00:41:17.972039 ignition[872]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:41:17.999226 systemd[1]: Reached target sysinit.target. Nov 1 00:41:17.976642 ignition[872]: disks: disks passed Nov 1 00:41:18.001396 systemd[1]: Reached target basic.target. Nov 1 00:41:17.976685 ignition[872]: Ignition finished successfully Nov 1 00:41:18.005976 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:41:18.099492 systemd-fsck[880]: ROOT: clean, 637/7326000 files, 481088/7359488 blocks Nov 1 00:41:18.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:18.104265 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:41:18.122864 kernel: audit: type=1130 audit(1761957678.106:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:18.107565 systemd[1]: Mounting sysroot.mount... Nov 1 00:41:18.140209 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:41:18.140619 systemd[1]: Mounted sysroot.mount. Nov 1 00:41:18.144258 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:41:18.183240 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:41:18.188729 systemd[1]: Starting flatcar-metadata-hostname.service... Nov 1 00:41:18.193214 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:41:18.193252 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:41:18.200452 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:41:18.279872 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:41:18.285586 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:41:18.307218 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (891) Nov 1 00:41:18.312320 initrd-setup-root[896]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:41:18.321957 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:41:18.321984 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:41:18.322001 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:41:18.348048 initrd-setup-root[920]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:41:18.372498 initrd-setup-root[928]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:41:18.473701 initrd-setup-root[936]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:41:18.581821 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:41:19.069205 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:41:19.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:19.074918 systemd[1]: Starting ignition-mount.service... Nov 1 00:41:19.094922 kernel: audit: type=1130 audit(1761957679.073:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:19.090561 systemd[1]: Starting sysroot-boot.service... Nov 1 00:41:19.094132 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Nov 1 00:41:19.094266 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Nov 1 00:41:19.121933 systemd[1]: Finished sysroot-boot.service. Nov 1 00:41:19.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:19.137220 kernel: audit: type=1130 audit(1761957679.124:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:19.630664 ignition[961]: INFO : Ignition 2.14.0 Nov 1 00:41:19.630664 ignition[961]: INFO : Stage: mount Nov 1 00:41:19.634644 ignition[961]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:41:19.634644 ignition[961]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:41:19.647860 ignition[961]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:41:19.651687 ignition[961]: INFO : mount: mount passed Nov 1 00:41:19.653521 ignition[961]: INFO : Ignition finished successfully Nov 1 00:41:19.656185 systemd[1]: Finished ignition-mount.service. Nov 1 00:41:19.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:19.671208 kernel: audit: type=1130 audit(1761957679.658:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:19.913512 coreos-metadata[890]: Nov 01 00:41:19.913 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Nov 1 00:41:19.933599 coreos-metadata[890]: Nov 01 00:41:19.933 INFO Fetch successful Nov 1 00:41:19.968935 coreos-metadata[890]: Nov 01 00:41:19.968 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Nov 1 00:41:19.980260 coreos-metadata[890]: Nov 01 00:41:19.980 INFO Fetch successful Nov 1 00:41:19.999304 coreos-metadata[890]: Nov 01 00:41:19.999 INFO wrote hostname ci-3510.3.8-n-9f29a8c334 to /sysroot/etc/hostname Nov 1 00:41:20.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:20.001272 systemd[1]: Finished flatcar-metadata-hostname.service. Nov 1 00:41:20.020618 kernel: audit: type=1130 audit(1761957680.005:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:20.006870 systemd[1]: Starting ignition-files.service... Nov 1 00:41:20.027023 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:41:20.047218 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (969) Nov 1 00:41:20.047264 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:41:20.054787 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:41:20.054812 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:41:20.318745 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:41:20.331891 ignition[988]: INFO : Ignition 2.14.0 Nov 1 00:41:20.331891 ignition[988]: INFO : Stage: files Nov 1 00:41:20.335655 ignition[988]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:41:20.335655 ignition[988]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:41:20.348466 ignition[988]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:41:20.370693 ignition[988]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:41:20.386576 ignition[988]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:41:20.386576 ignition[988]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:41:20.445460 ignition[988]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:41:20.449736 ignition[988]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:41:20.465855 unknown[988]: wrote ssh authorized keys file for user: core Nov 1 00:41:20.468616 ignition[988]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:41:20.484821 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Nov 1 00:41:20.489921 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Nov 1 00:41:20.551465 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Nov 1 00:41:20.605827 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Nov 1 00:41:20.605827 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:41:20.616586 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:41:20.654440 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Nov 1 00:41:20.654440 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Nov 1 00:41:20.654440 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Nov 1 00:41:20.654440 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:41:20.679819 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1246413556" Nov 1 00:41:20.679819 ignition[988]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1246413556": device or resource busy Nov 1 00:41:20.679819 ignition[988]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1246413556", trying btrfs: device or resource busy Nov 1 00:41:20.679819 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1246413556" Nov 1 00:41:20.704729 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1246413556" Nov 1 00:41:20.704729 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem1246413556" Nov 1 00:41:20.704729 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem1246413556" Nov 1 00:41:20.704729 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Nov 1 00:41:20.704729 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:41:20.704729 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:41:20.686486 systemd[1]: mnt-oem1246413556.mount: Deactivated successfully. Nov 1 00:41:20.741255 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1780213676" Nov 1 00:41:20.741255 ignition[988]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1780213676": device or resource busy Nov 1 00:41:20.741255 ignition[988]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1780213676", trying btrfs: device or resource busy Nov 1 00:41:20.741255 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1780213676" Nov 1 00:41:20.741255 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1780213676" Nov 1 00:41:20.741255 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem1780213676" Nov 1 00:41:20.770405 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem1780213676" Nov 1 00:41:20.770405 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:41:20.770405 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Nov 1 00:41:20.770405 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Nov 1 00:41:20.982499 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Nov 1 00:41:21.157029 ignition[988]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Nov 1 00:41:21.157029 ignition[988]: INFO : files: op(13): [started] processing unit "waagent.service" Nov 1 00:41:21.157029 ignition[988]: INFO : files: op(13): [finished] processing unit "waagent.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(14): [started] processing unit "nvidia.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(14): [finished] processing unit "nvidia.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:41:21.165081 ignition[988]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:41:21.165081 ignition[988]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:41:21.165081 ignition[988]: INFO : files: files passed Nov 1 00:41:21.165081 ignition[988]: INFO : Ignition finished successfully Nov 1 00:41:21.236015 kernel: audit: type=1130 audit(1761957681.171:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.161041 systemd[1]: Finished ignition-files.service. Nov 1 00:41:21.213897 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:41:21.233931 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:41:21.245357 systemd[1]: Starting ignition-quench.service... Nov 1 00:41:21.249581 initrd-setup-root-after-ignition[1013]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:41:21.249342 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:41:21.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.249453 systemd[1]: Finished ignition-quench.service. Nov 1 00:41:21.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.257706 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:41:21.260280 systemd[1]: Reached target ignition-complete.target. Nov 1 00:41:21.264781 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:41:21.280871 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:41:21.280968 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:41:21.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.285303 systemd[1]: Reached target initrd-fs.target. Nov 1 00:41:21.289145 systemd[1]: Reached target initrd.target. Nov 1 00:41:21.291142 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:41:21.291857 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:41:21.314626 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:41:21.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.319285 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:41:21.332316 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:41:21.336454 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:41:21.340856 systemd[1]: Stopped target timers.target. Nov 1 00:41:21.344539 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:41:21.346829 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:41:21.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.351094 systemd[1]: Stopped target initrd.target. Nov 1 00:41:21.354784 systemd[1]: Stopped target basic.target. Nov 1 00:41:21.358566 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:41:21.362768 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:41:21.367052 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:41:21.371486 systemd[1]: Stopped target remote-fs.target. Nov 1 00:41:21.375401 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:41:21.379677 systemd[1]: Stopped target sysinit.target. Nov 1 00:41:21.383581 systemd[1]: Stopped target local-fs.target. Nov 1 00:41:21.387251 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:41:21.391376 systemd[1]: Stopped target swap.target. Nov 1 00:41:21.395055 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:41:21.397858 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:41:21.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.402603 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:41:21.406676 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:41:21.409120 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:41:21.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.415289 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:41:21.415434 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:41:21.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.420817 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:41:21.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.420944 systemd[1]: Stopped ignition-files.service. Nov 1 00:41:21.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.424960 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Nov 1 00:41:21.444481 ignition[1026]: INFO : Ignition 2.14.0 Nov 1 00:41:21.444481 ignition[1026]: INFO : Stage: umount Nov 1 00:41:21.444481 ignition[1026]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:41:21.444481 ignition[1026]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:41:21.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.463805 iscsid[834]: iscsid shutting down. Nov 1 00:41:21.425092 systemd[1]: Stopped flatcar-metadata-hostname.service. Nov 1 00:41:21.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.473505 ignition[1026]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:41:21.473505 ignition[1026]: INFO : umount: umount passed Nov 1 00:41:21.473505 ignition[1026]: INFO : Ignition finished successfully Nov 1 00:41:21.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.430825 systemd[1]: Stopping ignition-mount.service... Nov 1 00:41:21.442647 systemd[1]: Stopping iscsid.service... Nov 1 00:41:21.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.448493 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:41:21.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.451296 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:41:21.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.451466 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:41:21.456903 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:41:21.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.457018 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:41:21.470733 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:41:21.470839 systemd[1]: Stopped iscsid.service. Nov 1 00:41:21.473916 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:41:21.474001 systemd[1]: Stopped ignition-mount.service. Nov 1 00:41:21.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.480130 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:41:21.480224 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:41:21.487252 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:41:21.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.488388 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:41:21.488429 systemd[1]: Stopped ignition-disks.service. Nov 1 00:41:21.491987 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:41:21.492035 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:41:21.495894 systemd[1]: ignition-fetch.service: Deactivated successfully. Nov 1 00:41:21.495942 systemd[1]: Stopped ignition-fetch.service. Nov 1 00:41:21.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.500579 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:41:21.567000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:41:21.500630 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:41:21.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.507419 systemd[1]: Stopped target paths.target. Nov 1 00:41:21.509154 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:41:21.512286 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:41:21.515437 systemd[1]: Stopped target slices.target. Nov 1 00:41:21.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.517180 systemd[1]: Stopped target sockets.target. Nov 1 00:41:21.520568 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:41:21.520614 systemd[1]: Closed iscsid.socket. Nov 1 00:41:21.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.527002 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:41:21.527052 systemd[1]: Stopped ignition-setup.service. Nov 1 00:41:21.530982 systemd[1]: Stopping iscsiuio.service... Nov 1 00:41:21.537422 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:41:21.537518 systemd[1]: Stopped iscsiuio.service. Nov 1 00:41:21.541605 systemd[1]: Stopped target network.target. Nov 1 00:41:21.545762 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:41:21.545807 systemd[1]: Closed iscsiuio.socket. Nov 1 00:41:21.549640 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:41:21.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.553684 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:41:21.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.558250 systemd-networkd[827]: eth0: DHCPv6 lease lost Nov 1 00:41:21.560698 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:41:21.635000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:41:21.560798 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:41:21.567423 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:41:21.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.567534 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:41:21.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.573752 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:41:21.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.573783 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:41:21.578827 systemd[1]: Stopping network-cleanup.service... Nov 1 00:41:21.582267 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:41:21.582327 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:41:21.584585 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:41:21.584627 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:41:21.586892 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:41:21.586929 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:41:21.590916 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:41:21.596373 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:41:21.596806 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:41:21.596908 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:41:21.614470 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:41:21.614554 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:41:21.620258 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:41:21.620304 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:41:21.623917 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:41:21.623966 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:41:21.625984 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:41:21.704217 kernel: hv_netvsc 7ced8d3a-6eb6-7ced-8d3a-6eb67ced8d3a eth0: Data path switched from VF: enP39310s1 Nov 1 00:41:21.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.626023 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:41:21.629896 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:41:21.629945 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:41:21.632738 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:41:21.644483 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Nov 1 00:41:21.644562 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Nov 1 00:41:21.649444 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:41:21.649490 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:41:21.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:21.653293 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:41:21.653343 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:41:21.658720 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Nov 1 00:41:21.659239 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:41:21.659332 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:41:21.721119 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:41:21.721231 systemd[1]: Stopped network-cleanup.service. Nov 1 00:41:22.002310 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:41:22.002453 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:41:22.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:22.008284 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:41:22.012717 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:41:22.012782 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:41:22.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:22.019761 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:41:22.034043 systemd[1]: Switching root. Nov 1 00:41:22.058373 systemd-journald[183]: Journal stopped Nov 1 00:41:37.121513 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Nov 1 00:41:37.121543 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:41:37.121556 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:41:37.121567 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:41:37.121578 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:41:37.121586 kernel: SELinux: policy capability open_perms=1 Nov 1 00:41:37.121600 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:41:37.121611 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:41:37.121619 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:41:37.121630 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:41:37.121639 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:41:37.121650 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:41:37.121658 kernel: kauditd_printk_skb: 43 callbacks suppressed Nov 1 00:41:37.121670 kernel: audit: type=1403 audit(1761957684.692:82): auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:41:37.121684 systemd[1]: Successfully loaded SELinux policy in 311.954ms. Nov 1 00:41:37.121695 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 34.234ms. Nov 1 00:41:37.121708 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:41:37.121718 systemd[1]: Detected virtualization microsoft. Nov 1 00:41:37.121731 systemd[1]: Detected architecture x86-64. Nov 1 00:41:37.121740 systemd[1]: Detected first boot. Nov 1 00:41:37.121752 systemd[1]: Hostname set to . Nov 1 00:41:37.121765 systemd[1]: Initializing machine ID from random generator. Nov 1 00:41:37.121774 kernel: audit: type=1400 audit(1761957685.453:83): avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:41:37.121787 kernel: audit: type=1400 audit(1761957685.479:84): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:41:37.121797 kernel: audit: type=1400 audit(1761957685.479:85): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:41:37.121810 kernel: audit: type=1334 audit(1761957685.503:86): prog-id=10 op=LOAD Nov 1 00:41:37.121820 kernel: audit: type=1334 audit(1761957685.504:87): prog-id=10 op=UNLOAD Nov 1 00:41:37.121830 kernel: audit: type=1334 audit(1761957685.508:88): prog-id=11 op=LOAD Nov 1 00:41:37.121842 kernel: audit: type=1334 audit(1761957685.508:89): prog-id=11 op=UNLOAD Nov 1 00:41:37.121851 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:41:37.121862 kernel: audit: type=1400 audit(1761957687.233:90): avc: denied { associate } for pid=1059 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:41:37.121873 kernel: audit: type=1300 audit(1761957687.233:90): arch=c000003e syscall=188 success=yes exit=0 a0=c00014d892 a1=c0000cedf8 a2=c0000d70c0 a3=32 items=0 ppid=1042 pid=1059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:37.121887 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:41:37.121897 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:41:37.121909 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:41:37.121922 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:41:37.121931 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:41:37.121943 kernel: audit: type=1334 audit(1761957696.635:92): prog-id=12 op=LOAD Nov 1 00:41:37.121952 kernel: audit: type=1334 audit(1761957696.635:93): prog-id=3 op=UNLOAD Nov 1 00:41:37.121965 kernel: audit: type=1334 audit(1761957696.640:94): prog-id=13 op=LOAD Nov 1 00:41:37.121978 kernel: audit: type=1334 audit(1761957696.645:95): prog-id=14 op=LOAD Nov 1 00:41:37.121988 kernel: audit: type=1334 audit(1761957696.645:96): prog-id=4 op=UNLOAD Nov 1 00:41:37.122000 kernel: audit: type=1334 audit(1761957696.645:97): prog-id=5 op=UNLOAD Nov 1 00:41:37.122009 kernel: audit: type=1334 audit(1761957696.649:98): prog-id=15 op=LOAD Nov 1 00:41:37.122021 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:41:37.122031 kernel: audit: type=1334 audit(1761957696.649:99): prog-id=12 op=UNLOAD Nov 1 00:41:37.122043 kernel: audit: type=1334 audit(1761957696.654:100): prog-id=16 op=LOAD Nov 1 00:41:37.122052 kernel: audit: type=1334 audit(1761957696.658:101): prog-id=17 op=LOAD Nov 1 00:41:37.122066 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:41:37.122079 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:41:37.122092 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:41:37.122110 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:41:37.122129 systemd[1]: Created slice system-getty.slice. Nov 1 00:41:37.122147 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:41:37.122165 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:41:37.122187 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:41:37.122219 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:41:37.122239 systemd[1]: Created slice user.slice. Nov 1 00:41:37.122259 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:41:37.122277 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:41:37.122297 systemd[1]: Set up automount boot.automount. Nov 1 00:41:37.122318 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:41:37.122336 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:41:37.122355 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:41:37.122374 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:41:37.122397 systemd[1]: Reached target integritysetup.target. Nov 1 00:41:37.122417 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:41:37.122437 systemd[1]: Reached target remote-fs.target. Nov 1 00:41:37.122457 systemd[1]: Reached target slices.target. Nov 1 00:41:37.122477 systemd[1]: Reached target swap.target. Nov 1 00:41:37.122496 systemd[1]: Reached target torcx.target. Nov 1 00:41:37.122514 systemd[1]: Reached target veritysetup.target. Nov 1 00:41:37.122537 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:41:37.122554 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:41:37.122572 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:41:37.122592 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:41:37.122611 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:41:37.122634 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:41:37.122653 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:41:37.122677 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:41:37.122695 systemd[1]: Mounting media.mount... Nov 1 00:41:37.122716 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:41:37.122736 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:41:37.122754 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:41:37.122771 systemd[1]: Mounting tmp.mount... Nov 1 00:41:37.122791 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:41:37.122812 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:41:37.122830 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:41:37.122854 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:41:37.122873 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:41:37.122891 systemd[1]: Starting modprobe@drm.service... Nov 1 00:41:37.122912 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:41:37.122930 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:41:37.122948 systemd[1]: Starting modprobe@loop.service... Nov 1 00:41:37.122964 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:41:37.122982 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:41:37.122996 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:41:37.123011 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:41:37.123025 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:41:37.123041 systemd[1]: Stopped systemd-journald.service. Nov 1 00:41:37.123058 systemd[1]: Starting systemd-journald.service... Nov 1 00:41:37.123072 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:41:37.123087 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:41:37.125255 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:41:37.125507 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:41:37.125522 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:41:37.125534 systemd[1]: Stopped verity-setup.service. Nov 1 00:41:37.125545 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:41:37.125558 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:41:37.125572 kernel: loop: module loaded Nov 1 00:41:37.125582 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:41:37.125594 systemd[1]: Mounted media.mount. Nov 1 00:41:37.125608 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:41:37.125620 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:41:37.125631 systemd[1]: Mounted tmp.mount. Nov 1 00:41:37.125642 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:41:37.125659 systemd-journald[1148]: Journal started Nov 1 00:41:37.125711 systemd-journald[1148]: Runtime Journal (/run/log/journal/5404a312149b4bc2b83134aba130d358) is 8.0M, max 159.0M, 151.0M free. Nov 1 00:41:24.692000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:41:25.453000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:41:25.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:41:25.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:41:25.503000 audit: BPF prog-id=10 op=LOAD Nov 1 00:41:25.504000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:41:25.508000 audit: BPF prog-id=11 op=LOAD Nov 1 00:41:25.508000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:41:27.233000 audit[1059]: AVC avc: denied { associate } for pid=1059 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:41:27.233000 audit[1059]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d892 a1=c0000cedf8 a2=c0000d70c0 a3=32 items=0 ppid=1042 pid=1059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:27.233000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:41:27.242000 audit[1059]: AVC avc: denied { associate } for pid=1059 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:41:27.242000 audit[1059]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d969 a2=1ed a3=0 items=2 ppid=1042 pid=1059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:27.242000 audit: CWD cwd="/" Nov 1 00:41:27.242000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:27.242000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:27.242000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:41:36.635000 audit: BPF prog-id=12 op=LOAD Nov 1 00:41:36.635000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:41:36.640000 audit: BPF prog-id=13 op=LOAD Nov 1 00:41:36.645000 audit: BPF prog-id=14 op=LOAD Nov 1 00:41:36.645000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:41:36.645000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:41:36.649000 audit: BPF prog-id=15 op=LOAD Nov 1 00:41:36.649000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:41:36.654000 audit: BPF prog-id=16 op=LOAD Nov 1 00:41:36.658000 audit: BPF prog-id=17 op=LOAD Nov 1 00:41:36.658000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:41:36.658000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:41:36.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:36.699000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:41:36.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:36.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:36.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.013000 audit: BPF prog-id=18 op=LOAD Nov 1 00:41:37.013000 audit: BPF prog-id=19 op=LOAD Nov 1 00:41:37.013000 audit: BPF prog-id=20 op=LOAD Nov 1 00:41:37.013000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:41:37.013000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:41:37.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.118000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:41:37.118000 audit[1148]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffe31878380 a2=4000 a3=7ffe3187841c items=0 ppid=1 pid=1148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:37.118000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:41:27.179310 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:41:36.633824 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:41:27.180121 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:41:36.633837 systemd[1]: Unnecessary job was removed for dev-sda6.device. Nov 1 00:41:27.180143 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:41:36.659559 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:41:27.180183 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:41:27.180211 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:41:27.180265 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:41:27.180280 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:41:27.180504 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:41:27.180558 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:41:27.180575 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:41:27.215271 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:41:27.215326 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:41:27.215348 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:41:27.215361 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:41:27.215381 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:41:27.215400 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:41:37.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:35.102547 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:35Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:41:35.102833 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:35Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:41:35.102945 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:35Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:41:35.103151 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:35Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:41:35.103278 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:35Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:41:35.103356 /usr/lib/systemd/system-generators/torcx-generator[1059]: time="2025-11-01T00:41:35Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:41:37.143574 systemd[1]: Started systemd-journald.service. Nov 1 00:41:37.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.144562 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:41:37.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.147118 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:41:37.147335 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:41:37.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.149721 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:41:37.149871 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:41:37.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.152230 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:41:37.152371 systemd[1]: Finished modprobe@drm.service. Nov 1 00:41:37.154583 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:41:37.154726 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:41:37.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.156000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.157059 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:41:37.157297 systemd[1]: Finished modprobe@loop.service. Nov 1 00:41:37.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.160308 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:41:37.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.163010 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:41:37.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.166096 systemd[1]: Reached target network-pre.target. Nov 1 00:41:37.169745 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:41:37.174040 kernel: fuse: init (API version 7.34) Nov 1 00:41:37.173632 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:41:37.193429 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:41:37.197178 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:41:37.200364 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:41:37.202288 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:41:37.204306 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:41:37.205853 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:41:37.209668 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:41:37.209888 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:41:37.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.214079 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:41:37.217999 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:41:37.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.220913 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:41:37.224600 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:41:37.228599 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:41:37.245040 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:41:37.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.247495 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:41:37.266810 systemd-journald[1148]: Time spent on flushing to /var/log/journal/5404a312149b4bc2b83134aba130d358 is 15.297ms for 1161 entries. Nov 1 00:41:37.266810 systemd-journald[1148]: System Journal (/var/log/journal/5404a312149b4bc2b83134aba130d358) is 8.0M, max 2.6G, 2.6G free. Nov 1 00:41:37.408620 systemd-journald[1148]: Received client request to flush runtime journal. Nov 1 00:41:37.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.288177 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:41:37.409250 udevadm[1182]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Nov 1 00:41:37.291915 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:41:37.341366 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:41:37.409864 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:41:37.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.970832 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:41:37.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:37.975270 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:41:38.400033 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:41:38.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:38.668630 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:41:38.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:38.671000 audit: BPF prog-id=21 op=LOAD Nov 1 00:41:38.671000 audit: BPF prog-id=22 op=LOAD Nov 1 00:41:38.671000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:41:38.671000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:41:38.672471 systemd[1]: Starting systemd-udevd.service... Nov 1 00:41:38.689937 systemd-udevd[1187]: Using default interface naming scheme 'v252'. Nov 1 00:41:39.121670 systemd[1]: Started systemd-udevd.service. Nov 1 00:41:39.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:39.126000 audit: BPF prog-id=23 op=LOAD Nov 1 00:41:39.127401 systemd[1]: Starting systemd-networkd.service... Nov 1 00:41:39.164540 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Nov 1 00:41:39.215000 audit: BPF prog-id=24 op=LOAD Nov 1 00:41:39.215000 audit: BPF prog-id=25 op=LOAD Nov 1 00:41:39.215000 audit: BPF prog-id=26 op=LOAD Nov 1 00:41:39.216440 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:41:39.248218 kernel: mousedev: PS/2 mouse device common for all mice Nov 1 00:41:39.251000 audit[1204]: AVC avc: denied { confidentiality } for pid=1204 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:41:39.264216 kernel: hv_vmbus: registering driver hv_balloon Nov 1 00:41:39.269217 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Nov 1 00:41:39.251000 audit[1204]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=561a2cdf7710 a1=f83c a2=7fc91ff31bc5 a3=5 items=12 ppid=1187 pid=1204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:39.251000 audit: CWD cwd="/" Nov 1 00:41:39.251000 audit: PATH item=0 name=(null) inode=235 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=1 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=2 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=3 name=(null) inode=15148 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=4 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=5 name=(null) inode=15149 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=6 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=7 name=(null) inode=15150 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=8 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=9 name=(null) inode=15151 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=10 name=(null) inode=15147 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PATH item=11 name=(null) inode=15152 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:41:39.251000 audit: PROCTITLE proctitle="(udev-worker)" Nov 1 00:41:39.290724 systemd[1]: Started systemd-userdbd.service. Nov 1 00:41:39.293776 kernel: hv_vmbus: registering driver hyperv_fb Nov 1 00:41:39.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:39.349849 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Nov 1 00:41:39.349956 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Nov 1 00:41:39.349982 kernel: hv_utils: Registering HyperV Utility Driver Nov 1 00:41:39.356797 kernel: hv_vmbus: registering driver hv_utils Nov 1 00:41:39.359923 kernel: Console: switching to colour dummy device 80x25 Nov 1 00:41:39.365910 kernel: Console: switching to colour frame buffer device 128x48 Nov 1 00:41:39.367214 kernel: hv_utils: Heartbeat IC version 3.0 Nov 1 00:41:39.367282 kernel: hv_utils: Shutdown IC version 3.2 Nov 1 00:41:39.367313 kernel: hv_utils: TimeSync IC version 4.0 Nov 1 00:41:40.201263 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:41:40.273579 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Nov 1 00:41:40.320950 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:41:40.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:40.325235 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:41:40.341481 systemd-networkd[1198]: lo: Link UP Nov 1 00:41:40.341492 systemd-networkd[1198]: lo: Gained carrier Nov 1 00:41:40.342187 systemd-networkd[1198]: Enumeration completed Nov 1 00:41:40.342314 systemd[1]: Started systemd-networkd.service. Nov 1 00:41:40.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:40.347159 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:41:40.359632 systemd-networkd[1198]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:41:40.414914 kernel: mlx5_core 998e:00:02.0 enP39310s1: Link up Nov 1 00:41:40.415226 kernel: buffer_size[0]=0 is not enough for lossless buffer Nov 1 00:41:40.436386 systemd-networkd[1198]: enP39310s1: Link UP Nov 1 00:41:40.436572 kernel: hv_netvsc 7ced8d3a-6eb6-7ced-8d3a-6eb67ced8d3a eth0: Data path switched to VF: enP39310s1 Nov 1 00:41:40.436569 systemd-networkd[1198]: eth0: Link UP Nov 1 00:41:40.436575 systemd-networkd[1198]: eth0: Gained carrier Nov 1 00:41:40.441837 systemd-networkd[1198]: enP39310s1: Gained carrier Nov 1 00:41:40.456659 systemd-networkd[1198]: eth0: DHCPv4 address 10.200.4.5/24, gateway 10.200.4.1 acquired from 168.63.129.16 Nov 1 00:41:40.729980 lvm[1264]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:41:40.780760 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:41:40.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:40.783611 systemd[1]: Reached target cryptsetup.target. Nov 1 00:41:40.787729 systemd[1]: Starting lvm2-activation.service... Nov 1 00:41:40.791966 lvm[1266]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:41:40.816541 systemd[1]: Finished lvm2-activation.service. Nov 1 00:41:40.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:40.819049 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:41:40.821358 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:41:40.821397 systemd[1]: Reached target local-fs.target. Nov 1 00:41:40.823541 systemd[1]: Reached target machines.target. Nov 1 00:41:40.826661 systemd[1]: Starting ldconfig.service... Nov 1 00:41:40.829090 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:41:40.829193 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:41:40.830354 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:41:40.833740 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:41:40.837470 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:41:40.840825 systemd[1]: Starting systemd-sysext.service... Nov 1 00:41:40.927537 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1268 (bootctl) Nov 1 00:41:40.929052 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:41:41.123198 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:41:41.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.391028 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:41:41.453798 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:41:41.454025 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:41:41.571577 kernel: loop0: detected capacity change from 0 to 229808 Nov 1 00:41:41.662580 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:41:41.679580 kernel: loop1: detected capacity change from 0 to 229808 Nov 1 00:41:41.695609 (sd-sysext)[1280]: Using extensions 'kubernetes'. Nov 1 00:41:41.696037 (sd-sysext)[1280]: Merged extensions into '/usr'. Nov 1 00:41:41.712144 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:41:41.713527 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:41:41.715878 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:41:41.717654 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:41:41.720222 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:41:41.722707 systemd[1]: Starting modprobe@loop.service... Nov 1 00:41:41.723693 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:41:41.723862 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:41:41.724015 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:41:41.726497 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:41:41.726837 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:41:41.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.730422 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:41:41.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.730602 systemd[1]: Finished modprobe@loop.service. Nov 1 00:41:41.732486 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:41:41.732603 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:41:41.733182 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:41:41.733283 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:41:41.846309 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:41:41.850119 systemd[1]: Finished systemd-sysext.service. Nov 1 00:41:41.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.854000 systemd[1]: Starting ensure-sysext.service... Nov 1 00:41:41.858683 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:41:41.862640 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:41:41.864958 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:41:41.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:41.870244 systemd[1]: Reloading. Nov 1 00:41:41.877127 systemd-tmpfiles[1287]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:41:41.916167 systemd-tmpfiles[1287]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:41:41.919262 systemd-tmpfiles[1287]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:41:41.926219 /usr/lib/systemd/system-generators/torcx-generator[1307]: time="2025-11-01T00:41:41Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:41:41.926258 /usr/lib/systemd/system-generators/torcx-generator[1307]: time="2025-11-01T00:41:41Z" level=info msg="torcx already run" Nov 1 00:41:42.029171 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:41:42.029192 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:41:42.045725 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:41:42.108000 audit: BPF prog-id=27 op=LOAD Nov 1 00:41:42.108000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:41:42.109000 audit: BPF prog-id=28 op=LOAD Nov 1 00:41:42.109000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:41:42.109000 audit: BPF prog-id=29 op=LOAD Nov 1 00:41:42.109000 audit: BPF prog-id=30 op=LOAD Nov 1 00:41:42.109000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:41:42.109000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:41:42.110000 audit: BPF prog-id=31 op=LOAD Nov 1 00:41:42.110000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:41:42.110000 audit: BPF prog-id=32 op=LOAD Nov 1 00:41:42.110000 audit: BPF prog-id=33 op=LOAD Nov 1 00:41:42.110000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:41:42.110000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:41:42.113000 audit: BPF prog-id=34 op=LOAD Nov 1 00:41:42.113000 audit: BPF prog-id=35 op=LOAD Nov 1 00:41:42.113000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:41:42.113000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:41:42.127654 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:41:42.127957 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:41:42.129304 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:41:42.132720 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:41:42.135710 systemd[1]: Starting modprobe@loop.service... Nov 1 00:41:42.136965 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:41:42.137169 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:41:42.137381 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:41:42.146672 systemd[1]: Finished ensure-sysext.service. Nov 1 00:41:42.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.149294 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:41:42.149974 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:41:42.151857 systemd[1]: Starting modprobe@drm.service... Nov 1 00:41:42.153600 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:41:42.153684 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:41:42.153880 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:41:42.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.159199 systemd-fsck[1275]: fsck.fat 4.2 (2021-01-31) Nov 1 00:41:42.159199 systemd-fsck[1275]: /dev/sda1: 790 files, 120773/258078 clusters Nov 1 00:41:42.154418 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:41:42.154613 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:41:42.155970 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:41:42.156082 systemd[1]: Finished modprobe@loop.service. Nov 1 00:41:42.157143 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:41:42.161628 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:41:42.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.164822 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:41:42.164966 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:41:42.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.167444 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:41:42.167771 systemd[1]: Finished modprobe@drm.service. Nov 1 00:41:42.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.171364 systemd[1]: Mounting boot.mount... Nov 1 00:41:42.172852 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:41:42.183651 systemd[1]: Mounted boot.mount. Nov 1 00:41:42.201912 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:41:42.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.263712 systemd-networkd[1198]: eth0: Gained IPv6LL Nov 1 00:41:42.269460 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:41:42.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.862903 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:41:42.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.869508 systemd[1]: Starting audit-rules.service... Nov 1 00:41:42.870855 kernel: kauditd_printk_skb: 113 callbacks suppressed Nov 1 00:41:42.870895 kernel: audit: type=1130 audit(1761957702.866:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.884570 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:41:42.888108 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:41:42.892000 audit: BPF prog-id=36 op=LOAD Nov 1 00:41:42.897948 systemd[1]: Starting systemd-resolved.service... Nov 1 00:41:42.906570 kernel: audit: type=1334 audit(1761957702.892:199): prog-id=36 op=LOAD Nov 1 00:41:42.906638 kernel: audit: type=1334 audit(1761957702.899:200): prog-id=37 op=LOAD Nov 1 00:41:42.899000 audit: BPF prog-id=37 op=LOAD Nov 1 00:41:42.902024 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:41:42.908586 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:41:42.936000 audit[1384]: SYSTEM_BOOT pid=1384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.949565 kernel: audit: type=1127 audit(1761957702.936:201): pid=1384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.952436 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:41:42.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.966571 kernel: audit: type=1130 audit(1761957702.953:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.967263 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:41:42.969883 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:41:42.988910 kernel: audit: type=1130 audit(1761957702.968:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:42.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:43.019349 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:41:43.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:43.022186 systemd[1]: Reached target time-set.target. Nov 1 00:41:43.034568 kernel: audit: type=1130 audit(1761957703.020:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:43.089181 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:41:43.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:43.100347 systemd-resolved[1382]: Positive Trust Anchors: Nov 1 00:41:43.100662 systemd-resolved[1382]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:41:43.100701 systemd-resolved[1382]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:41:43.110570 kernel: audit: type=1130 audit(1761957703.097:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:43.230725 systemd-resolved[1382]: Using system hostname 'ci-3510.3.8-n-9f29a8c334'. Nov 1 00:41:43.232365 systemd[1]: Started systemd-resolved.service. Nov 1 00:41:43.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:43.234937 systemd[1]: Reached target network.target. Nov 1 00:41:43.249486 kernel: audit: type=1130 audit(1761957703.233:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:41:43.249509 systemd[1]: Reached target network-online.target. Nov 1 00:41:43.251643 systemd[1]: Reached target nss-lookup.target. Nov 1 00:41:43.271000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:41:43.273430 systemd[1]: Finished audit-rules.service. Nov 1 00:41:43.278734 augenrules[1399]: No rules Nov 1 00:41:43.281560 kernel: audit: type=1305 audit(1761957703.271:207): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:41:43.271000 audit[1399]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd2932ceb0 a2=420 a3=0 items=0 ppid=1378 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:41:43.271000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:41:43.350805 systemd-timesyncd[1383]: Contacted time server 176.58.115.34:123 (0.flatcar.pool.ntp.org). Nov 1 00:41:43.350885 systemd-timesyncd[1383]: Initial clock synchronization to Sat 2025-11-01 00:41:43.352601 UTC. Nov 1 00:41:49.411501 ldconfig[1267]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:41:49.421966 systemd[1]: Finished ldconfig.service. Nov 1 00:41:49.425695 systemd[1]: Starting systemd-update-done.service... Nov 1 00:41:49.432373 systemd[1]: Finished systemd-update-done.service. Nov 1 00:41:49.434954 systemd[1]: Reached target sysinit.target. Nov 1 00:41:49.437138 systemd[1]: Started motdgen.path. Nov 1 00:41:49.438876 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:41:49.441763 systemd[1]: Started logrotate.timer. Nov 1 00:41:49.443777 systemd[1]: Started mdadm.timer. Nov 1 00:41:49.445597 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:41:49.447853 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:41:49.447888 systemd[1]: Reached target paths.target. Nov 1 00:41:49.449864 systemd[1]: Reached target timers.target. Nov 1 00:41:49.452110 systemd[1]: Listening on dbus.socket. Nov 1 00:41:49.455077 systemd[1]: Starting docker.socket... Nov 1 00:41:49.460057 systemd[1]: Listening on sshd.socket. Nov 1 00:41:49.462130 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:41:49.462570 systemd[1]: Listening on docker.socket. Nov 1 00:41:49.464462 systemd[1]: Reached target sockets.target. Nov 1 00:41:49.466321 systemd[1]: Reached target basic.target. Nov 1 00:41:49.468141 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:41:49.468173 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:41:49.469143 systemd[1]: Starting containerd.service... Nov 1 00:41:49.473003 systemd[1]: Starting dbus.service... Nov 1 00:41:49.475618 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:41:49.478790 systemd[1]: Starting extend-filesystems.service... Nov 1 00:41:49.481158 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:41:49.483214 systemd[1]: Starting kubelet.service... Nov 1 00:41:49.486864 systemd[1]: Starting motdgen.service... Nov 1 00:41:49.489869 systemd[1]: Started nvidia.service. Nov 1 00:41:49.493511 systemd[1]: Starting prepare-helm.service... Nov 1 00:41:49.496794 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:41:49.500224 systemd[1]: Starting sshd-keygen.service... Nov 1 00:41:49.504397 systemd[1]: Starting systemd-logind.service... Nov 1 00:41:49.506442 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:41:49.506526 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:41:49.507050 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:41:49.508546 systemd[1]: Starting update-engine.service... Nov 1 00:41:49.511820 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:41:49.564423 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:41:49.564645 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:41:49.574005 jq[1419]: true Nov 1 00:41:49.573790 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:41:49.574335 jq[1409]: false Nov 1 00:41:49.574051 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:41:49.583069 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:41:49.583250 systemd[1]: Finished motdgen.service. Nov 1 00:41:49.613273 jq[1434]: true Nov 1 00:41:49.661812 systemd-logind[1417]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 1 00:41:49.663761 env[1431]: time="2025-11-01T00:41:49.661955897Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:41:49.664679 systemd-logind[1417]: New seat seat0. Nov 1 00:41:49.668878 extend-filesystems[1410]: Found loop1 Nov 1 00:41:49.668878 extend-filesystems[1410]: Found sda Nov 1 00:41:49.668878 extend-filesystems[1410]: Found sda1 Nov 1 00:41:49.668878 extend-filesystems[1410]: Found sda2 Nov 1 00:41:49.668878 extend-filesystems[1410]: Found sda3 Nov 1 00:41:49.668878 extend-filesystems[1410]: Found usr Nov 1 00:41:49.690235 extend-filesystems[1410]: Found sda4 Nov 1 00:41:49.690235 extend-filesystems[1410]: Found sda6 Nov 1 00:41:49.690235 extend-filesystems[1410]: Found sda7 Nov 1 00:41:49.690235 extend-filesystems[1410]: Found sda9 Nov 1 00:41:49.690235 extend-filesystems[1410]: Checking size of /dev/sda9 Nov 1 00:41:49.717080 tar[1422]: linux-amd64/LICENSE Nov 1 00:41:49.717080 tar[1422]: linux-amd64/helm Nov 1 00:41:49.764900 extend-filesystems[1410]: Old size kept for /dev/sda9 Nov 1 00:41:49.770073 extend-filesystems[1410]: Found sr0 Nov 1 00:41:49.766013 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:41:49.766178 systemd[1]: Finished extend-filesystems.service. Nov 1 00:41:49.787056 env[1431]: time="2025-11-01T00:41:49.787012080Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:41:49.788230 env[1431]: time="2025-11-01T00:41:49.787180094Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:41:49.794419 env[1431]: time="2025-11-01T00:41:49.794278912Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:41:49.794419 env[1431]: time="2025-11-01T00:41:49.794312715Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:41:49.798058 env[1431]: time="2025-11-01T00:41:49.797955232Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:41:49.798058 env[1431]: time="2025-11-01T00:41:49.797995935Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:41:49.798058 env[1431]: time="2025-11-01T00:41:49.798015537Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:41:49.798058 env[1431]: time="2025-11-01T00:41:49.798030438Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:41:49.798257 env[1431]: time="2025-11-01T00:41:49.798131347Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:41:49.798422 env[1431]: time="2025-11-01T00:41:49.798392270Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:41:49.798681 env[1431]: time="2025-11-01T00:41:49.798651192Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:41:49.798734 env[1431]: time="2025-11-01T00:41:49.798681895Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:41:49.798774 env[1431]: time="2025-11-01T00:41:49.798750501Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:41:49.798774 env[1431]: time="2025-11-01T00:41:49.798766903Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:41:49.801622 bash[1458]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:41:49.802693 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819003464Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819055668Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819077170Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819129875Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819150276Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819229283Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819249685Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819269387Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819289088Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819308590Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819326792Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819343993Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819461103Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:41:49.821406 env[1431]: time="2025-11-01T00:41:49.819562812Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.819958047Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820004851Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820027253Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820085758Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820103359Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820120361Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820197868Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820215869Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820232371Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820247672Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820263073Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820298976Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820444889Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820463391Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822107 env[1431]: time="2025-11-01T00:41:49.820480692Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.825902 env[1431]: time="2025-11-01T00:41:49.820497294Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:41:49.825902 env[1431]: time="2025-11-01T00:41:49.820517195Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:41:49.825902 env[1431]: time="2025-11-01T00:41:49.820532097Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:41:49.825902 env[1431]: time="2025-11-01T00:41:49.820565700Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:41:49.825902 env[1431]: time="2025-11-01T00:41:49.820608303Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:41:49.822186 systemd[1]: Started containerd.service. Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.820866726Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.820939532Z" level=info msg="Connect containerd service" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.820979236Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.821708699Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.822003825Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.822055729Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.823858686Z" level=info msg="Start subscribing containerd event" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.823902090Z" level=info msg="Start recovering state" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.823960795Z" level=info msg="Start event monitor" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.823971596Z" level=info msg="Start snapshots syncer" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.823980997Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:41:49.826165 env[1431]: time="2025-11-01T00:41:49.823988597Z" level=info msg="Start streaming server" Nov 1 00:41:49.865232 env[1431]: time="2025-11-01T00:41:49.857080377Z" level=info msg="containerd successfully booted in 0.201783s" Nov 1 00:41:49.866612 dbus-daemon[1408]: [system] SELinux support is enabled Nov 1 00:41:49.866771 systemd[1]: Started dbus.service. Nov 1 00:41:49.871223 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:41:49.871257 systemd[1]: Reached target system-config.target. Nov 1 00:41:49.873669 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:41:49.873691 systemd[1]: Reached target user-config.target. Nov 1 00:41:49.877358 systemd[1]: Started systemd-logind.service. Nov 1 00:41:49.878808 dbus-daemon[1408]: [system] Successfully activated service 'org.freedesktop.systemd1' Nov 1 00:41:49.896343 systemd[1]: nvidia.service: Deactivated successfully. Nov 1 00:41:50.557263 update_engine[1418]: I1101 00:41:50.556351 1418 main.cc:92] Flatcar Update Engine starting Nov 1 00:41:50.614303 systemd[1]: Started update-engine.service. Nov 1 00:41:50.616350 update_engine[1418]: I1101 00:41:50.616250 1418 update_check_scheduler.cc:74] Next update check in 3m17s Nov 1 00:41:50.619653 systemd[1]: Started locksmithd.service. Nov 1 00:41:50.832152 tar[1422]: linux-amd64/README.md Nov 1 00:41:50.842470 systemd[1]: Finished prepare-helm.service. Nov 1 00:41:51.116834 systemd[1]: Started kubelet.service. Nov 1 00:41:51.490570 sshd_keygen[1432]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:41:51.518564 systemd[1]: Finished sshd-keygen.service. Nov 1 00:41:51.525225 systemd[1]: Starting issuegen.service... Nov 1 00:41:51.529288 systemd[1]: Started waagent.service. Nov 1 00:41:51.536633 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:41:51.536826 systemd[1]: Finished issuegen.service. Nov 1 00:41:51.540590 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:41:51.570425 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:41:51.575166 systemd[1]: Started getty@tty1.service. Nov 1 00:41:51.579429 systemd[1]: Started serial-getty@ttyS0.service. Nov 1 00:41:51.582345 systemd[1]: Reached target getty.target. Nov 1 00:41:51.584575 systemd[1]: Reached target multi-user.target. Nov 1 00:41:51.588417 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:41:51.608022 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:41:51.608214 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:41:51.611114 systemd[1]: Startup finished in 1.025s (firmware) + 18.403s (loader) + 929ms (kernel) + 14.417s (initrd) + 26.820s (userspace) = 1min 1.596s. Nov 1 00:41:51.829137 kubelet[1516]: E1101 00:41:51.829029 1516 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:41:51.830822 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:41:51.830995 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:41:51.831277 systemd[1]: kubelet.service: Consumed 1.153s CPU time. Nov 1 00:41:52.055198 login[1539]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Nov 1 00:41:52.056793 login[1540]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Nov 1 00:41:52.087509 systemd[1]: Created slice user-500.slice. Nov 1 00:41:52.089112 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:41:52.092817 systemd-logind[1417]: New session 1 of user core. Nov 1 00:41:52.097481 systemd-logind[1417]: New session 2 of user core. Nov 1 00:41:52.102043 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:41:52.103987 systemd[1]: Starting user@500.service... Nov 1 00:41:52.125209 (systemd)[1543]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:41:52.318613 systemd[1543]: Queued start job for default target default.target. Nov 1 00:41:52.319232 systemd[1543]: Reached target paths.target. Nov 1 00:41:52.319265 systemd[1543]: Reached target sockets.target. Nov 1 00:41:52.319285 systemd[1543]: Reached target timers.target. Nov 1 00:41:52.319305 systemd[1543]: Reached target basic.target. Nov 1 00:41:52.319431 systemd[1]: Started user@500.service. Nov 1 00:41:52.320817 systemd[1]: Started session-1.scope. Nov 1 00:41:52.321631 systemd[1543]: Reached target default.target. Nov 1 00:41:52.321688 systemd[1543]: Startup finished in 189ms. Nov 1 00:41:52.321757 systemd[1]: Started session-2.scope. Nov 1 00:41:52.392095 locksmithd[1512]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:41:57.118475 waagent[1534]: 2025-11-01T00:41:57.118369Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Nov 1 00:41:57.131872 waagent[1534]: 2025-11-01T00:41:57.120961Z INFO Daemon Daemon OS: flatcar 3510.3.8 Nov 1 00:41:57.131872 waagent[1534]: 2025-11-01T00:41:57.121575Z INFO Daemon Daemon Python: 3.9.16 Nov 1 00:41:57.131872 waagent[1534]: 2025-11-01T00:41:57.122875Z INFO Daemon Daemon Run daemon Nov 1 00:41:57.131872 waagent[1534]: 2025-11-01T00:41:57.123835Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Nov 1 00:41:57.138312 waagent[1534]: 2025-11-01T00:41:57.138190Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Nov 1 00:41:57.146015 waagent[1534]: 2025-11-01T00:41:57.145908Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.147468Z INFO Daemon Daemon cloud-init is enabled: False Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.148263Z INFO Daemon Daemon Using waagent for provisioning Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.149754Z INFO Daemon Daemon Activate resource disk Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.150497Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.158314Z INFO Daemon Daemon Found device: None Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.158855Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.159748Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.161426Z INFO Daemon Daemon Clean protocol and wireserver endpoint Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.162476Z INFO Daemon Daemon Running default provisioning handler Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.172030Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.174737Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.175488Z INFO Daemon Daemon cloud-init is enabled: False Nov 1 00:41:57.189230 waagent[1534]: 2025-11-01T00:41:57.176304Z INFO Daemon Daemon Copying ovf-env.xml Nov 1 00:41:57.246919 waagent[1534]: 2025-11-01T00:41:57.242666Z INFO Daemon Daemon Successfully mounted dvd Nov 1 00:41:57.386688 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Nov 1 00:41:57.429037 waagent[1534]: 2025-11-01T00:41:57.428876Z INFO Daemon Daemon Detect protocol endpoint Nov 1 00:41:57.445277 waagent[1534]: 2025-11-01T00:41:57.430632Z INFO Daemon Daemon Clean protocol and wireserver endpoint Nov 1 00:41:57.445277 waagent[1534]: 2025-11-01T00:41:57.431731Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Nov 1 00:41:57.445277 waagent[1534]: 2025-11-01T00:41:57.432652Z INFO Daemon Daemon Test for route to 168.63.129.16 Nov 1 00:41:57.445277 waagent[1534]: 2025-11-01T00:41:57.434570Z INFO Daemon Daemon Route to 168.63.129.16 exists Nov 1 00:41:57.445277 waagent[1534]: 2025-11-01T00:41:57.435378Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Nov 1 00:41:57.568486 waagent[1534]: 2025-11-01T00:41:57.568408Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Nov 1 00:41:57.572727 waagent[1534]: 2025-11-01T00:41:57.572679Z INFO Daemon Daemon Wire protocol version:2012-11-30 Nov 1 00:41:57.575495 waagent[1534]: 2025-11-01T00:41:57.575435Z INFO Daemon Daemon Server preferred version:2015-04-05 Nov 1 00:41:58.010038 waagent[1534]: 2025-11-01T00:41:58.009890Z INFO Daemon Daemon Initializing goal state during protocol detection Nov 1 00:41:58.022380 waagent[1534]: 2025-11-01T00:41:58.022297Z INFO Daemon Daemon Forcing an update of the goal state.. Nov 1 00:41:58.025385 waagent[1534]: 2025-11-01T00:41:58.025316Z INFO Daemon Daemon Fetching goal state [incarnation 1] Nov 1 00:41:58.180016 waagent[1534]: 2025-11-01T00:41:58.179885Z INFO Daemon Daemon Found private key matching thumbprint 702884A50BBF9C24DAC41515BB19C29E4B09410F Nov 1 00:41:58.186160 waagent[1534]: 2025-11-01T00:41:58.181370Z INFO Daemon Daemon Fetch goal state completed Nov 1 00:41:58.220288 waagent[1534]: 2025-11-01T00:41:58.220205Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: ff8c493e-bac8-44c2-880f-cf9b00459eac New eTag: 7833750983471835286] Nov 1 00:41:58.225755 waagent[1534]: 2025-11-01T00:41:58.222152Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Nov 1 00:41:58.231211 waagent[1534]: 2025-11-01T00:41:58.231149Z INFO Daemon Daemon Starting provisioning Nov 1 00:41:58.237995 waagent[1534]: 2025-11-01T00:41:58.232372Z INFO Daemon Daemon Handle ovf-env.xml. Nov 1 00:41:58.237995 waagent[1534]: 2025-11-01T00:41:58.233268Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-9f29a8c334] Nov 1 00:41:58.254217 waagent[1534]: 2025-11-01T00:41:58.254121Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-9f29a8c334] Nov 1 00:41:58.262103 waagent[1534]: 2025-11-01T00:41:58.255756Z INFO Daemon Daemon Examine /proc/net/route for primary interface Nov 1 00:41:58.262103 waagent[1534]: 2025-11-01T00:41:58.256691Z INFO Daemon Daemon Primary interface is [eth0] Nov 1 00:41:58.269915 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Nov 1 00:41:58.270166 systemd[1]: Stopped systemd-networkd-wait-online.service. Nov 1 00:41:58.270238 systemd[1]: Stopping systemd-networkd-wait-online.service... Nov 1 00:41:58.270609 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:41:58.274675 systemd-networkd[1198]: eth0: DHCPv6 lease lost Nov 1 00:41:58.276935 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:41:58.277129 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:41:58.279496 systemd[1]: Starting systemd-networkd.service... Nov 1 00:41:58.312061 systemd-networkd[1585]: enP39310s1: Link UP Nov 1 00:41:58.312071 systemd-networkd[1585]: enP39310s1: Gained carrier Nov 1 00:41:58.313427 systemd-networkd[1585]: eth0: Link UP Nov 1 00:41:58.313436 systemd-networkd[1585]: eth0: Gained carrier Nov 1 00:41:58.313904 systemd-networkd[1585]: lo: Link UP Nov 1 00:41:58.313912 systemd-networkd[1585]: lo: Gained carrier Nov 1 00:41:58.314225 systemd-networkd[1585]: eth0: Gained IPv6LL Nov 1 00:41:58.314803 systemd-networkd[1585]: Enumeration completed Nov 1 00:41:58.319621 waagent[1534]: 2025-11-01T00:41:58.316449Z INFO Daemon Daemon Create user account if not exists Nov 1 00:41:58.314896 systemd[1]: Started systemd-networkd.service. Nov 1 00:41:58.317262 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:41:58.323791 waagent[1534]: 2025-11-01T00:41:58.321572Z INFO Daemon Daemon User core already exists, skip useradd Nov 1 00:41:58.323791 waagent[1534]: 2025-11-01T00:41:58.322661Z INFO Daemon Daemon Configure sudoer Nov 1 00:41:58.324390 waagent[1534]: 2025-11-01T00:41:58.324332Z INFO Daemon Daemon Configure sshd Nov 1 00:41:58.325366 waagent[1534]: 2025-11-01T00:41:58.325318Z INFO Daemon Daemon Deploy ssh public key. Nov 1 00:41:58.332030 systemd-networkd[1585]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:41:58.374629 systemd-networkd[1585]: eth0: DHCPv4 address 10.200.4.5/24, gateway 10.200.4.1 acquired from 168.63.129.16 Nov 1 00:41:58.377589 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:41:59.454250 waagent[1534]: 2025-11-01T00:41:59.454154Z INFO Daemon Daemon Provisioning complete Nov 1 00:41:59.468352 waagent[1534]: 2025-11-01T00:41:59.468281Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Nov 1 00:41:59.475581 waagent[1534]: 2025-11-01T00:41:59.469871Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Nov 1 00:41:59.475581 waagent[1534]: 2025-11-01T00:41:59.471437Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Nov 1 00:41:59.735723 waagent[1591]: 2025-11-01T00:41:59.735534Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Nov 1 00:41:59.736432 waagent[1591]: 2025-11-01T00:41:59.736369Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:41:59.736588 waagent[1591]: 2025-11-01T00:41:59.736520Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:41:59.747723 waagent[1591]: 2025-11-01T00:41:59.747656Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Nov 1 00:41:59.747884 waagent[1591]: 2025-11-01T00:41:59.747835Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Nov 1 00:41:59.798831 waagent[1591]: 2025-11-01T00:41:59.798708Z INFO ExtHandler ExtHandler Found private key matching thumbprint 702884A50BBF9C24DAC41515BB19C29E4B09410F Nov 1 00:41:59.799119 waagent[1591]: 2025-11-01T00:41:59.799060Z INFO ExtHandler ExtHandler Fetch goal state completed Nov 1 00:41:59.812102 waagent[1591]: 2025-11-01T00:41:59.812042Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 48abfd94-09c6-4eb2-bbf1-5b58bcff4203 New eTag: 7833750983471835286] Nov 1 00:41:59.812597 waagent[1591]: 2025-11-01T00:41:59.812527Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Nov 1 00:41:59.888897 waagent[1591]: 2025-11-01T00:41:59.888741Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Nov 1 00:41:59.903130 waagent[1591]: 2025-11-01T00:41:59.903043Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1591 Nov 1 00:41:59.906498 waagent[1591]: 2025-11-01T00:41:59.906428Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Nov 1 00:41:59.907672 waagent[1591]: 2025-11-01T00:41:59.907614Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Nov 1 00:41:59.994459 waagent[1591]: 2025-11-01T00:41:59.994345Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Nov 1 00:41:59.994824 waagent[1591]: 2025-11-01T00:41:59.994761Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Nov 1 00:42:00.002856 waagent[1591]: 2025-11-01T00:42:00.002802Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Nov 1 00:42:00.003317 waagent[1591]: 2025-11-01T00:42:00.003258Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Nov 1 00:42:00.004358 waagent[1591]: 2025-11-01T00:42:00.004293Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Nov 1 00:42:00.006011 waagent[1591]: 2025-11-01T00:42:00.005951Z INFO ExtHandler ExtHandler Starting env monitor service. Nov 1 00:42:00.006952 waagent[1591]: 2025-11-01T00:42:00.006894Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Nov 1 00:42:00.007275 waagent[1591]: 2025-11-01T00:42:00.007221Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:42:00.007654 waagent[1591]: 2025-11-01T00:42:00.007598Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:42:00.008132 waagent[1591]: 2025-11-01T00:42:00.008080Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:42:00.008275 waagent[1591]: 2025-11-01T00:42:00.008224Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:42:00.009010 waagent[1591]: 2025-11-01T00:42:00.008954Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Nov 1 00:42:00.009276 waagent[1591]: 2025-11-01T00:42:00.009218Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Nov 1 00:42:00.009616 waagent[1591]: 2025-11-01T00:42:00.009560Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Nov 1 00:42:00.010354 waagent[1591]: 2025-11-01T00:42:00.010293Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Nov 1 00:42:00.010354 waagent[1591]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Nov 1 00:42:00.010354 waagent[1591]: eth0 00000000 0104C80A 0003 0 0 1024 00000000 0 0 0 Nov 1 00:42:00.010354 waagent[1591]: eth0 0004C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Nov 1 00:42:00.010354 waagent[1591]: eth0 0104C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:42:00.010354 waagent[1591]: eth0 10813FA8 0104C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:42:00.010354 waagent[1591]: eth0 FEA9FEA9 0104C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:42:00.010838 waagent[1591]: 2025-11-01T00:42:00.010778Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Nov 1 00:42:00.011262 waagent[1591]: 2025-11-01T00:42:00.011205Z INFO EnvHandler ExtHandler Configure routes Nov 1 00:42:00.011402 waagent[1591]: 2025-11-01T00:42:00.011350Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Nov 1 00:42:00.014383 waagent[1591]: 2025-11-01T00:42:00.014169Z INFO EnvHandler ExtHandler Gateway:None Nov 1 00:42:00.014837 waagent[1591]: 2025-11-01T00:42:00.014781Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Nov 1 00:42:00.014922 waagent[1591]: 2025-11-01T00:42:00.014865Z INFO EnvHandler ExtHandler Routes:None Nov 1 00:42:00.027869 waagent[1591]: 2025-11-01T00:42:00.027803Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Nov 1 00:42:00.028691 waagent[1591]: 2025-11-01T00:42:00.028632Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Nov 1 00:42:00.030764 waagent[1591]: 2025-11-01T00:42:00.030698Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Nov 1 00:42:00.071905 waagent[1591]: 2025-11-01T00:42:00.071833Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Nov 1 00:42:00.089066 waagent[1591]: 2025-11-01T00:42:00.088957Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1585' Nov 1 00:42:00.187381 waagent[1591]: 2025-11-01T00:42:00.187218Z INFO MonitorHandler ExtHandler Network interfaces: Nov 1 00:42:00.187381 waagent[1591]: Executing ['ip', '-a', '-o', 'link']: Nov 1 00:42:00.187381 waagent[1591]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Nov 1 00:42:00.187381 waagent[1591]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:3a:6e:b6 brd ff:ff:ff:ff:ff:ff Nov 1 00:42:00.187381 waagent[1591]: 3: enP39310s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:3a:6e:b6 brd ff:ff:ff:ff:ff:ff\ altname enP39310p0s2 Nov 1 00:42:00.187381 waagent[1591]: Executing ['ip', '-4', '-a', '-o', 'address']: Nov 1 00:42:00.187381 waagent[1591]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Nov 1 00:42:00.187381 waagent[1591]: 2: eth0 inet 10.200.4.5/24 metric 1024 brd 10.200.4.255 scope global eth0\ valid_lft forever preferred_lft forever Nov 1 00:42:00.187381 waagent[1591]: Executing ['ip', '-6', '-a', '-o', 'address']: Nov 1 00:42:00.187381 waagent[1591]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Nov 1 00:42:00.187381 waagent[1591]: 2: eth0 inet6 fe80::7eed:8dff:fe3a:6eb6/64 scope link \ valid_lft forever preferred_lft forever Nov 1 00:42:00.439863 waagent[1591]: 2025-11-01T00:42:00.439790Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.15.0.1 -- exiting Nov 1 00:42:00.474821 waagent[1534]: 2025-11-01T00:42:00.474701Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Nov 1 00:42:00.480500 waagent[1534]: 2025-11-01T00:42:00.480442Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.15.0.1 to be the latest agent Nov 1 00:42:01.591042 waagent[1624]: 2025-11-01T00:42:01.590933Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.15.0.1) Nov 1 00:42:01.591790 waagent[1624]: 2025-11-01T00:42:01.591719Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Nov 1 00:42:01.591959 waagent[1624]: 2025-11-01T00:42:01.591904Z INFO ExtHandler ExtHandler Python: 3.9.16 Nov 1 00:42:01.592122 waagent[1624]: 2025-11-01T00:42:01.592075Z INFO ExtHandler ExtHandler CPU Arch: x86_64 Nov 1 00:42:01.607467 waagent[1624]: 2025-11-01T00:42:01.607364Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: x86_64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Nov 1 00:42:01.607899 waagent[1624]: 2025-11-01T00:42:01.607840Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:42:01.608075 waagent[1624]: 2025-11-01T00:42:01.608026Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:42:01.608311 waagent[1624]: 2025-11-01T00:42:01.608259Z INFO ExtHandler ExtHandler Initializing the goal state... Nov 1 00:42:01.620546 waagent[1624]: 2025-11-01T00:42:01.620466Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Nov 1 00:42:01.629161 waagent[1624]: 2025-11-01T00:42:01.629093Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.179 Nov 1 00:42:01.630113 waagent[1624]: 2025-11-01T00:42:01.630051Z INFO ExtHandler Nov 1 00:42:01.630281 waagent[1624]: 2025-11-01T00:42:01.630230Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 080b26cc-b2f0-4052-be9c-61fce7ebb1b9 eTag: 7833750983471835286 source: Fabric] Nov 1 00:42:01.631013 waagent[1624]: 2025-11-01T00:42:01.630952Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Nov 1 00:42:01.632135 waagent[1624]: 2025-11-01T00:42:01.632071Z INFO ExtHandler Nov 1 00:42:01.632288 waagent[1624]: 2025-11-01T00:42:01.632238Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Nov 1 00:42:01.640639 waagent[1624]: 2025-11-01T00:42:01.640585Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Nov 1 00:42:01.641097 waagent[1624]: 2025-11-01T00:42:01.641046Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Nov 1 00:42:01.661923 waagent[1624]: 2025-11-01T00:42:01.661865Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Nov 1 00:42:01.714822 waagent[1624]: 2025-11-01T00:42:01.714706Z INFO ExtHandler Downloaded certificate {'thumbprint': '702884A50BBF9C24DAC41515BB19C29E4B09410F', 'hasPrivateKey': True} Nov 1 00:42:01.716047 waagent[1624]: 2025-11-01T00:42:01.715975Z INFO ExtHandler Fetch goal state from WireServer completed Nov 1 00:42:01.716931 waagent[1624]: 2025-11-01T00:42:01.716869Z INFO ExtHandler ExtHandler Goal state initialization completed. Nov 1 00:42:01.736625 waagent[1624]: 2025-11-01T00:42:01.736508Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Nov 1 00:42:01.744506 waagent[1624]: 2025-11-01T00:42:01.744414Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Nov 1 00:42:01.748113 waagent[1624]: 2025-11-01T00:42:01.748024Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Nov 1 00:42:01.748331 waagent[1624]: 2025-11-01T00:42:01.748277Z INFO ExtHandler ExtHandler Checking state of the firewall Nov 1 00:42:01.780482 waagent[1624]: 2025-11-01T00:42:01.780370Z WARNING ExtHandler ExtHandler The firewall rules for Azure Fabric are not setup correctly (the environment thread will fix it): The following rules are missing: ['ACCEPT DNS', 'DROP'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n', 'iptables: Bad rule (does a matching rule exist in that chain?).\n']. Current state: Nov 1 00:42:01.780482 waagent[1624]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:01.780482 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:01.780482 waagent[1624]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:01.780482 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:01.780482 waagent[1624]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:01.780482 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:01.780482 waagent[1624]: 55 7859 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:42:01.781606 waagent[1624]: 2025-11-01T00:42:01.781506Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Nov 1 00:42:01.784208 waagent[1624]: 2025-11-01T00:42:01.784110Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Nov 1 00:42:01.784653 waagent[1624]: 2025-11-01T00:42:01.784587Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up /lib/systemd/system/waagent-network-setup.service Nov 1 00:42:01.785043 waagent[1624]: 2025-11-01T00:42:01.784986Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Nov 1 00:42:01.793025 waagent[1624]: 2025-11-01T00:42:01.792966Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Nov 1 00:42:01.793478 waagent[1624]: 2025-11-01T00:42:01.793422Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Nov 1 00:42:01.800721 waagent[1624]: 2025-11-01T00:42:01.800660Z INFO ExtHandler ExtHandler WALinuxAgent-2.15.0.1 running as process 1624 Nov 1 00:42:01.803759 waagent[1624]: 2025-11-01T00:42:01.803700Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Nov 1 00:42:01.804487 waagent[1624]: 2025-11-01T00:42:01.804428Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Nov 1 00:42:01.805315 waagent[1624]: 2025-11-01T00:42:01.805256Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Nov 1 00:42:01.807885 waagent[1624]: 2025-11-01T00:42:01.807824Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Nov 1 00:42:01.808207 waagent[1624]: 2025-11-01T00:42:01.808153Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Nov 1 00:42:01.809791 waagent[1624]: 2025-11-01T00:42:01.809732Z INFO ExtHandler ExtHandler Starting env monitor service. Nov 1 00:42:01.810644 waagent[1624]: 2025-11-01T00:42:01.810588Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:42:01.810814 waagent[1624]: 2025-11-01T00:42:01.810766Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:42:01.811326 waagent[1624]: 2025-11-01T00:42:01.811272Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Nov 1 00:42:01.811665 waagent[1624]: 2025-11-01T00:42:01.811608Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Nov 1 00:42:01.811665 waagent[1624]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Nov 1 00:42:01.811665 waagent[1624]: eth0 00000000 0104C80A 0003 0 0 1024 00000000 0 0 0 Nov 1 00:42:01.811665 waagent[1624]: eth0 0004C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Nov 1 00:42:01.811665 waagent[1624]: eth0 0104C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:42:01.811665 waagent[1624]: eth0 10813FA8 0104C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:42:01.811665 waagent[1624]: eth0 FEA9FEA9 0104C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:42:01.814771 waagent[1624]: 2025-11-01T00:42:01.814681Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:42:01.815017 waagent[1624]: 2025-11-01T00:42:01.814955Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:42:01.815524 waagent[1624]: 2025-11-01T00:42:01.815447Z INFO EnvHandler ExtHandler Configure routes Nov 1 00:42:01.815839 waagent[1624]: 2025-11-01T00:42:01.815782Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Nov 1 00:42:01.818280 waagent[1624]: 2025-11-01T00:42:01.818198Z INFO EnvHandler ExtHandler Gateway:None Nov 1 00:42:01.818502 waagent[1624]: 2025-11-01T00:42:01.818453Z INFO EnvHandler ExtHandler Routes:None Nov 1 00:42:01.819801 waagent[1624]: 2025-11-01T00:42:01.819730Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Nov 1 00:42:01.821592 waagent[1624]: 2025-11-01T00:42:01.821454Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Nov 1 00:42:01.830238 waagent[1624]: 2025-11-01T00:42:01.830139Z INFO MonitorHandler ExtHandler Network interfaces: Nov 1 00:42:01.830238 waagent[1624]: Executing ['ip', '-a', '-o', 'link']: Nov 1 00:42:01.830238 waagent[1624]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Nov 1 00:42:01.830238 waagent[1624]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:3a:6e:b6 brd ff:ff:ff:ff:ff:ff Nov 1 00:42:01.830238 waagent[1624]: 3: enP39310s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:3a:6e:b6 brd ff:ff:ff:ff:ff:ff\ altname enP39310p0s2 Nov 1 00:42:01.830238 waagent[1624]: Executing ['ip', '-4', '-a', '-o', 'address']: Nov 1 00:42:01.830238 waagent[1624]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Nov 1 00:42:01.830238 waagent[1624]: 2: eth0 inet 10.200.4.5/24 metric 1024 brd 10.200.4.255 scope global eth0\ valid_lft forever preferred_lft forever Nov 1 00:42:01.830238 waagent[1624]: Executing ['ip', '-6', '-a', '-o', 'address']: Nov 1 00:42:01.830238 waagent[1624]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Nov 1 00:42:01.830238 waagent[1624]: 2: eth0 inet6 fe80::7eed:8dff:fe3a:6eb6/64 scope link \ valid_lft forever preferred_lft forever Nov 1 00:42:01.832723 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:42:01.833479 systemd[1]: Stopped kubelet.service. Nov 1 00:42:01.833532 systemd[1]: kubelet.service: Consumed 1.153s CPU time. Nov 1 00:42:01.834993 systemd[1]: Starting kubelet.service... Nov 1 00:42:01.838851 waagent[1624]: 2025-11-01T00:42:01.838609Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Nov 1 00:42:01.839404 waagent[1624]: 2025-11-01T00:42:01.839339Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Nov 1 00:42:01.840105 waagent[1624]: 2025-11-01T00:42:01.840004Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Nov 1 00:42:01.860621 waagent[1624]: 2025-11-01T00:42:01.860467Z INFO ExtHandler ExtHandler Downloading agent manifest Nov 1 00:42:01.885378 waagent[1624]: 2025-11-01T00:42:01.885260Z INFO ExtHandler ExtHandler Nov 1 00:42:01.886244 waagent[1624]: 2025-11-01T00:42:01.886166Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Nov 1 00:42:01.897904 waagent[1624]: 2025-11-01T00:42:01.897833Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 15233559-89b4-436c-9fd3-a3cc32d1aee6 correlation 8aad2b7d-d8ab-436b-ab93-339bae7eced8 created: 2025-11-01T00:40:38.078224Z] Nov 1 00:42:01.899121 waagent[1624]: 2025-11-01T00:42:01.899053Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Nov 1 00:42:01.901926 waagent[1624]: 2025-11-01T00:42:01.901857Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 16 ms] Nov 1 00:42:01.945796 waagent[1624]: 2025-11-01T00:42:01.945717Z INFO ExtHandler ExtHandler Looking for existing remote access users. Nov 1 00:42:01.948201 waagent[1624]: 2025-11-01T00:42:01.948122Z WARNING EnvHandler ExtHandler The firewall is not configured correctly. The following rules are missing: ['ACCEPT DNS', 'DROP'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n', 'iptables: Bad rule (does a matching rule exist in that chain?).\n']. Will reset it. Current state: Nov 1 00:42:01.948201 waagent[1624]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:01.948201 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:01.948201 waagent[1624]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:01.948201 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:01.948201 waagent[1624]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:01.948201 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:01.948201 waagent[1624]: 109 17163 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:42:01.957398 waagent[1624]: 2025-11-01T00:42:01.957304Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.15.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: D2FF2D09-4B60-473D-9C8F-26C04F7712E1;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Nov 1 00:42:01.988414 systemd[1]: Started kubelet.service. Nov 1 00:42:02.008104 waagent[1624]: 2025-11-01T00:42:02.007983Z INFO EnvHandler ExtHandler The firewall was setup successfully: Nov 1 00:42:02.008104 waagent[1624]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:02.008104 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:02.008104 waagent[1624]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:02.008104 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:02.008104 waagent[1624]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:42:02.008104 waagent[1624]: pkts bytes target prot opt in out source destination Nov 1 00:42:02.008104 waagent[1624]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Nov 1 00:42:02.008104 waagent[1624]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:42:02.008104 waagent[1624]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:42:02.010447 waagent[1624]: 2025-11-01T00:42:02.010384Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Nov 1 00:42:02.619927 kubelet[1671]: E1101 00:42:02.619873 1671 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:42:02.622972 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:42:02.623141 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:42:12.677009 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:42:12.677315 systemd[1]: Stopped kubelet.service. Nov 1 00:42:12.679401 systemd[1]: Starting kubelet.service... Nov 1 00:42:12.775835 systemd[1]: Started kubelet.service. Nov 1 00:42:13.428454 kubelet[1685]: E1101 00:42:13.428403 1685 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:42:13.430471 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:42:13.430651 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:42:23.676944 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Nov 1 00:42:23.677255 systemd[1]: Stopped kubelet.service. Nov 1 00:42:23.679221 systemd[1]: Starting kubelet.service... Nov 1 00:42:23.776656 systemd[1]: Started kubelet.service. Nov 1 00:42:24.365059 systemd[1]: Created slice system-sshd.slice. Nov 1 00:42:24.367040 systemd[1]: Started sshd@0-10.200.4.5:22-10.200.16.10:58916.service. Nov 1 00:42:24.476754 kubelet[1695]: E1101 00:42:24.476701 1695 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:42:24.478426 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:42:24.478604 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:42:25.326315 sshd[1701]: Accepted publickey for core from 10.200.16.10 port 58916 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:42:25.327939 sshd[1701]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:25.333407 systemd[1]: Started session-3.scope. Nov 1 00:42:25.333946 systemd-logind[1417]: New session 3 of user core. Nov 1 00:42:25.852997 systemd[1]: Started sshd@1-10.200.4.5:22-10.200.16.10:58924.service. Nov 1 00:42:26.445284 sshd[1707]: Accepted publickey for core from 10.200.16.10 port 58924 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:42:26.446998 sshd[1707]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:26.451315 systemd-logind[1417]: New session 4 of user core. Nov 1 00:42:26.452917 systemd[1]: Started session-4.scope. Nov 1 00:42:26.867382 sshd[1707]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:26.871128 systemd[1]: sshd@1-10.200.4.5:22-10.200.16.10:58924.service: Deactivated successfully. Nov 1 00:42:26.872119 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:42:26.872936 systemd-logind[1417]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:42:26.873849 systemd-logind[1417]: Removed session 4. Nov 1 00:42:26.967446 systemd[1]: Started sshd@2-10.200.4.5:22-10.200.16.10:58938.service. Nov 1 00:42:27.563651 sshd[1713]: Accepted publickey for core from 10.200.16.10 port 58938 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:42:27.565459 sshd[1713]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:27.570526 systemd[1]: Started session-5.scope. Nov 1 00:42:27.571266 systemd-logind[1417]: New session 5 of user core. Nov 1 00:42:27.981790 sshd[1713]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:27.985003 systemd[1]: sshd@2-10.200.4.5:22-10.200.16.10:58938.service: Deactivated successfully. Nov 1 00:42:27.985811 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:42:27.986413 systemd-logind[1417]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:42:27.987257 systemd-logind[1417]: Removed session 5. Nov 1 00:42:28.074979 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Nov 1 00:42:28.082005 systemd[1]: Started sshd@3-10.200.4.5:22-10.200.16.10:58946.service. Nov 1 00:42:28.679110 sshd[1719]: Accepted publickey for core from 10.200.16.10 port 58946 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:42:28.680843 sshd[1719]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:28.686590 systemd[1]: Started session-6.scope. Nov 1 00:42:28.687153 systemd-logind[1417]: New session 6 of user core. Nov 1 00:42:29.103775 sshd[1719]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:29.107040 systemd[1]: sshd@3-10.200.4.5:22-10.200.16.10:58946.service: Deactivated successfully. Nov 1 00:42:29.107837 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:42:29.108441 systemd-logind[1417]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:42:29.109196 systemd-logind[1417]: Removed session 6. Nov 1 00:42:29.203615 systemd[1]: Started sshd@4-10.200.4.5:22-10.200.16.10:58954.service. Nov 1 00:42:29.797450 sshd[1725]: Accepted publickey for core from 10.200.16.10 port 58954 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:42:29.799118 sshd[1725]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:29.803903 systemd[1]: Started session-7.scope. Nov 1 00:42:29.804345 systemd-logind[1417]: New session 7 of user core. Nov 1 00:42:30.401023 sudo[1728]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:42:30.401384 sudo[1728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:42:30.425757 dbus-daemon[1408]: \xd0\u001d6M\xb6U: received setenforce notice (enforcing=1589423136) Nov 1 00:42:30.427620 sudo[1728]: pam_unix(sudo:session): session closed for user root Nov 1 00:42:30.566964 sshd[1725]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:30.570648 systemd[1]: sshd@4-10.200.4.5:22-10.200.16.10:58954.service: Deactivated successfully. Nov 1 00:42:30.571822 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:42:30.572734 systemd-logind[1417]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:42:30.573903 systemd-logind[1417]: Removed session 7. Nov 1 00:42:30.673978 systemd[1]: Started sshd@5-10.200.4.5:22-10.200.16.10:52862.service. Nov 1 00:42:31.272123 sshd[1732]: Accepted publickey for core from 10.200.16.10 port 52862 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:42:31.274085 sshd[1732]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:31.279092 systemd[1]: Started session-8.scope. Nov 1 00:42:31.279803 systemd-logind[1417]: New session 8 of user core. Nov 1 00:42:31.600937 sudo[1736]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:42:31.601318 sudo[1736]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:42:31.604292 sudo[1736]: pam_unix(sudo:session): session closed for user root Nov 1 00:42:31.608855 sudo[1735]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:42:31.609155 sudo[1735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:42:31.617709 systemd[1]: Stopping audit-rules.service... Nov 1 00:42:31.622346 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:42:31.622409 kernel: audit: type=1305 audit(1761957751.617:208): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:42:31.617000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:42:31.622656 auditctl[1739]: No rules Nov 1 00:42:31.623088 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:42:31.623244 systemd[1]: Stopped audit-rules.service. Nov 1 00:42:31.624732 systemd[1]: Starting audit-rules.service... Nov 1 00:42:31.643767 kernel: audit: type=1300 audit(1761957751.617:208): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc45f1f880 a2=420 a3=0 items=0 ppid=1 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:31.617000 audit[1739]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc45f1f880 a2=420 a3=0 items=0 ppid=1 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:31.617000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:42:31.646785 augenrules[1756]: No rules Nov 1 00:42:31.647462 systemd[1]: Finished audit-rules.service. Nov 1 00:42:31.649511 kernel: audit: type=1327 audit(1761957751.617:208): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:42:31.649576 kernel: audit: type=1131 audit(1761957751.621:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.649823 sudo[1735]: pam_unix(sudo:session): session closed for user root Nov 1 00:42:31.660335 kernel: audit: type=1130 audit(1761957751.643:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.647000 audit[1735]: USER_END pid=1735 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.681464 kernel: audit: type=1106 audit(1761957751.647:211): pid=1735 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.681521 kernel: audit: type=1104 audit(1761957751.647:212): pid=1735 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.647000 audit[1735]: CRED_DISP pid=1735 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.744527 sshd[1732]: pam_unix(sshd:session): session closed for user core Nov 1 00:42:31.744000 audit[1732]: USER_END pid=1732 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:42:31.748046 systemd[1]: sshd@5-10.200.4.5:22-10.200.16.10:52862.service: Deactivated successfully. Nov 1 00:42:31.748865 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:42:31.750262 systemd-logind[1417]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:42:31.751300 systemd-logind[1417]: Removed session 8. Nov 1 00:42:31.762563 kernel: audit: type=1106 audit(1761957751.744:213): pid=1732 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:42:31.762628 kernel: audit: type=1104 audit(1761957751.744:214): pid=1732 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:42:31.744000 audit[1732]: CRED_DISP pid=1732 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:42:31.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.4.5:22-10.200.16.10:52862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.788352 kernel: audit: type=1131 audit(1761957751.746:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.4.5:22-10.200.16.10:52862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:31.843420 systemd[1]: Started sshd@6-10.200.4.5:22-10.200.16.10:52878.service. Nov 1 00:42:31.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.4.5:22-10.200.16.10:52878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:32.433000 audit[1762]: USER_ACCT pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:42:32.434996 sshd[1762]: Accepted publickey for core from 10.200.16.10 port 52878 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:42:32.434000 audit[1762]: CRED_ACQ pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:42:32.434000 audit[1762]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5070c2a0 a2=3 a3=0 items=0 ppid=1 pid=1762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.434000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:42:32.436610 sshd[1762]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:42:32.441271 systemd[1]: Started session-9.scope. Nov 1 00:42:32.441741 systemd-logind[1417]: New session 9 of user core. Nov 1 00:42:32.444000 audit[1762]: USER_START pid=1762 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:42:32.446000 audit[1764]: CRED_ACQ pid=1764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:42:32.761000 audit[1765]: USER_ACCT pid=1765 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:42:32.763628 sudo[1765]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:42:32.763920 sudo[1765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:42:32.762000 audit[1765]: CRED_REFR pid=1765 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:42:32.764000 audit[1765]: USER_START pid=1765 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:42:32.787751 systemd[1]: Starting docker.service... Nov 1 00:42:32.823597 env[1775]: time="2025-11-01T00:42:32.823538504Z" level=info msg="Starting up" Nov 1 00:42:32.824784 env[1775]: time="2025-11-01T00:42:32.824752711Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:42:32.824784 env[1775]: time="2025-11-01T00:42:32.824771211Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:42:32.824951 env[1775]: time="2025-11-01T00:42:32.824789711Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:42:32.824951 env[1775]: time="2025-11-01T00:42:32.824802211Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:42:32.826174 env[1775]: time="2025-11-01T00:42:32.826144719Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:42:32.826174 env[1775]: time="2025-11-01T00:42:32.826162719Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:42:32.826325 env[1775]: time="2025-11-01T00:42:32.826177519Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:42:32.826325 env[1775]: time="2025-11-01T00:42:32.826189219Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:42:32.899147 env[1775]: time="2025-11-01T00:42:32.899105814Z" level=info msg="Loading containers: start." Nov 1 00:42:32.956000 audit[1802]: NETFILTER_CFG table=nat:7 family=2 entries=2 op=nft_register_chain pid=1802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.956000 audit[1802]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc57607c70 a2=0 a3=7ffc57607c5c items=0 ppid=1775 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.956000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:42:32.958000 audit[1804]: NETFILTER_CFG table=filter:8 family=2 entries=2 op=nft_register_chain pid=1804 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.958000 audit[1804]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe6ea84e80 a2=0 a3=7ffe6ea84e6c items=0 ppid=1775 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.958000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:42:32.960000 audit[1806]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1806 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.960000 audit[1806]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffb11d3b60 a2=0 a3=7fffb11d3b4c items=0 ppid=1775 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.960000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:42:32.962000 audit[1808]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_chain pid=1808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.962000 audit[1808]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff7ff552c0 a2=0 a3=7fff7ff552ac items=0 ppid=1775 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.962000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:42:32.964000 audit[1810]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1810 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.964000 audit[1810]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdeaddcf20 a2=0 a3=7ffdeaddcf0c items=0 ppid=1775 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.964000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:42:32.966000 audit[1812]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1812 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.966000 audit[1812]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdf5ce62e0 a2=0 a3=7ffdf5ce62cc items=0 ppid=1775 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.966000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:42:32.984000 audit[1814]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_chain pid=1814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.984000 audit[1814]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffec5b80210 a2=0 a3=7ffec5b801fc items=0 ppid=1775 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.984000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:42:32.986000 audit[1816]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_rule pid=1816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.986000 audit[1816]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffcc82865b0 a2=0 a3=7ffcc828659c items=0 ppid=1775 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.986000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:42:32.988000 audit[1818]: NETFILTER_CFG table=filter:15 family=2 entries=2 op=nft_register_chain pid=1818 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:32.988000 audit[1818]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff14e699b0 a2=0 a3=7fff14e6999c items=0 ppid=1775 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:32.988000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:42:33.005000 audit[1822]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_unregister_rule pid=1822 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.005000 audit[1822]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff9efe5020 a2=0 a3=7fff9efe500c items=0 ppid=1775 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.005000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:42:33.010000 audit[1823]: NETFILTER_CFG table=filter:17 family=2 entries=1 op=nft_register_rule pid=1823 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.010000 audit[1823]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcf9efdc60 a2=0 a3=7ffcf9efdc4c items=0 ppid=1775 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.010000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:42:33.055573 kernel: Initializing XFRM netlink socket Nov 1 00:42:33.086433 env[1775]: time="2025-11-01T00:42:33.086383502Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:42:33.155000 audit[1831]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1831 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.155000 audit[1831]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc45391d50 a2=0 a3=7ffc45391d3c items=0 ppid=1775 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.155000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:42:33.185000 audit[1834]: NETFILTER_CFG table=nat:19 family=2 entries=1 op=nft_register_rule pid=1834 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.185000 audit[1834]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffddbcae6f0 a2=0 a3=7ffddbcae6dc items=0 ppid=1775 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.185000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:42:33.189000 audit[1837]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.189000 audit[1837]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc7191da10 a2=0 a3=7ffc7191d9fc items=0 ppid=1775 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.189000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:42:33.191000 audit[1839]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1839 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.191000 audit[1839]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdcc374cc0 a2=0 a3=7ffdcc374cac items=0 ppid=1775 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.191000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:42:33.193000 audit[1841]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1841 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.193000 audit[1841]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd5403e8b0 a2=0 a3=7ffd5403e89c items=0 ppid=1775 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.193000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:42:33.195000 audit[1843]: NETFILTER_CFG table=nat:23 family=2 entries=2 op=nft_register_chain pid=1843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.195000 audit[1843]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc36db99a0 a2=0 a3=7ffc36db998c items=0 ppid=1775 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.195000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:42:33.197000 audit[1845]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1845 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.197000 audit[1845]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd3a9444d0 a2=0 a3=7ffd3a9444bc items=0 ppid=1775 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.197000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:42:33.199000 audit[1847]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1847 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.199000 audit[1847]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd3b0ee260 a2=0 a3=7ffd3b0ee24c items=0 ppid=1775 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.199000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:42:33.201000 audit[1850]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1850 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.201000 audit[1850]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffff31ea0d0 a2=0 a3=7ffff31ea0bc items=0 ppid=1775 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.201000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:42:33.203000 audit[1852]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1852 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.203000 audit[1852]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff8b92fbd0 a2=0 a3=7fff8b92fbbc items=0 ppid=1775 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.203000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:42:33.205000 audit[1854]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1854 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.205000 audit[1854]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd20c6a1b0 a2=0 a3=7ffd20c6a19c items=0 ppid=1775 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.205000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:42:33.207710 systemd-networkd[1585]: docker0: Link UP Nov 1 00:42:33.225000 audit[1858]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_unregister_rule pid=1858 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.225000 audit[1858]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd33500b00 a2=0 a3=7ffd33500aec items=0 ppid=1775 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.225000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:42:33.230000 audit[1859]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1859 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:42:33.230000 audit[1859]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffc5ce7600 a2=0 a3=7fffc5ce75ec items=0 ppid=1775 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:42:33.230000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:42:33.232856 env[1775]: time="2025-11-01T00:42:33.232827847Z" level=info msg="Loading containers: done." Nov 1 00:42:33.244743 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3916689375-merged.mount: Deactivated successfully. Nov 1 00:42:33.320115 env[1775]: time="2025-11-01T00:42:33.320063690Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:42:33.320365 env[1775]: time="2025-11-01T00:42:33.320338592Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:42:33.320510 env[1775]: time="2025-11-01T00:42:33.320483992Z" level=info msg="Daemon has completed initialization" Nov 1 00:42:33.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:33.356610 systemd[1]: Started docker.service. Nov 1 00:42:33.366946 env[1775]: time="2025-11-01T00:42:33.366893129Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:42:34.676934 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Nov 1 00:42:34.677236 systemd[1]: Stopped kubelet.service. Nov 1 00:42:34.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:34.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:34.679464 systemd[1]: Starting kubelet.service... Nov 1 00:42:34.777312 systemd[1]: Started kubelet.service. Nov 1 00:42:34.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:35.446193 update_engine[1418]: I1101 00:42:35.445459 1418 update_attempter.cc:509] Updating boot flags... Nov 1 00:42:35.468511 env[1431]: time="2025-11-01T00:42:35.468172314Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Nov 1 00:42:35.498924 kubelet[1894]: E1101 00:42:35.498888 1894 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:42:35.500769 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:42:35.500927 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:42:35.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:42:36.665580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1953435605.mount: Deactivated successfully. Nov 1 00:42:38.512348 env[1431]: time="2025-11-01T00:42:38.512290204Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:38.519402 env[1431]: time="2025-11-01T00:42:38.519359030Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:38.523346 env[1431]: time="2025-11-01T00:42:38.523309845Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:38.526812 env[1431]: time="2025-11-01T00:42:38.526775657Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:38.527590 env[1431]: time="2025-11-01T00:42:38.527541160Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62\"" Nov 1 00:42:38.528316 env[1431]: time="2025-11-01T00:42:38.528285663Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Nov 1 00:42:40.479986 env[1431]: time="2025-11-01T00:42:40.479928808Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:40.486799 env[1431]: time="2025-11-01T00:42:40.486753730Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:40.491085 env[1431]: time="2025-11-01T00:42:40.491041344Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:40.495202 env[1431]: time="2025-11-01T00:42:40.495169458Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:40.495833 env[1431]: time="2025-11-01T00:42:40.495798360Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668\"" Nov 1 00:42:40.496518 env[1431]: time="2025-11-01T00:42:40.496490762Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Nov 1 00:42:42.094836 env[1431]: time="2025-11-01T00:42:42.094779198Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:42.100177 env[1431]: time="2025-11-01T00:42:42.100079513Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:42.104336 env[1431]: time="2025-11-01T00:42:42.104300125Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:42.108470 env[1431]: time="2025-11-01T00:42:42.108437736Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:42.109245 env[1431]: time="2025-11-01T00:42:42.109205439Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf\"" Nov 1 00:42:42.109903 env[1431]: time="2025-11-01T00:42:42.109878141Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Nov 1 00:42:45.676960 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Nov 1 00:42:45.677290 systemd[1]: Stopped kubelet.service. Nov 1 00:42:45.691972 kernel: kauditd_printk_skb: 88 callbacks suppressed Nov 1 00:42:45.692089 kernel: audit: type=1130 audit(1761957765.675:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:45.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:45.679277 systemd[1]: Starting kubelet.service... Nov 1 00:42:45.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:45.705584 kernel: audit: type=1131 audit(1761957765.675:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:45.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:45.790797 systemd[1]: Started kubelet.service. Nov 1 00:42:45.803568 kernel: audit: type=1130 audit(1761957765.789:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:45.833807 kubelet[1946]: E1101 00:42:45.833758 1946 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:42:45.835448 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:42:45.835631 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:42:45.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:42:45.848578 kernel: audit: type=1131 audit(1761957765.834:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:42:51.871159 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1392618959.mount: Deactivated successfully. Nov 1 00:42:53.615297 env[1431]: time="2025-11-01T00:42:53.615239140Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:53.619950 env[1431]: time="2025-11-01T00:42:53.619909218Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:53.623507 env[1431]: time="2025-11-01T00:42:53.623470753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:53.626428 env[1431]: time="2025-11-01T00:42:53.626394065Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:53.626758 env[1431]: time="2025-11-01T00:42:53.626729278Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3\"" Nov 1 00:42:53.627519 env[1431]: time="2025-11-01T00:42:53.627484906Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Nov 1 00:42:54.284994 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2320668352.mount: Deactivated successfully. Nov 1 00:42:55.656142 env[1431]: time="2025-11-01T00:42:55.656085378Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:55.661194 env[1431]: time="2025-11-01T00:42:55.661152461Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:55.664465 env[1431]: time="2025-11-01T00:42:55.664431379Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:55.667506 env[1431]: time="2025-11-01T00:42:55.667476489Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:55.668164 env[1431]: time="2025-11-01T00:42:55.668134913Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Nov 1 00:42:55.668695 env[1431]: time="2025-11-01T00:42:55.668669932Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:42:55.926944 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Nov 1 00:42:55.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:55.927191 systemd[1]: Stopped kubelet.service. Nov 1 00:42:55.928800 systemd[1]: Starting kubelet.service... Nov 1 00:42:55.955401 kernel: audit: type=1130 audit(1761957775.926:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:55.955512 kernel: audit: type=1131 audit(1761957775.926:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:55.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:56.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:56.031394 systemd[1]: Started kubelet.service. Nov 1 00:42:56.048585 kernel: audit: type=1130 audit(1761957776.031:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:42:56.677859 kubelet[1956]: E1101 00:42:56.677813 1956 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:42:56.679622 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:42:56.679783 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:42:56.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:42:56.692581 kernel: audit: type=1131 audit(1761957776.679:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:42:57.093441 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1690071655.mount: Deactivated successfully. Nov 1 00:42:57.120892 env[1431]: time="2025-11-01T00:42:57.120846152Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:57.126129 env[1431]: time="2025-11-01T00:42:57.126093931Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:57.129311 env[1431]: time="2025-11-01T00:42:57.129280340Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:57.132140 env[1431]: time="2025-11-01T00:42:57.132112037Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:42:57.132591 env[1431]: time="2025-11-01T00:42:57.132538951Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Nov 1 00:42:57.133288 env[1431]: time="2025-11-01T00:42:57.133258776Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Nov 1 00:42:57.732960 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4230440026.mount: Deactivated successfully. Nov 1 00:43:00.326615 env[1431]: time="2025-11-01T00:43:00.326561088Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:00.331806 env[1431]: time="2025-11-01T00:43:00.331768852Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:00.335045 env[1431]: time="2025-11-01T00:43:00.335016355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:00.338321 env[1431]: time="2025-11-01T00:43:00.338292558Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:00.339011 env[1431]: time="2025-11-01T00:43:00.338979479Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Nov 1 00:43:04.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:04.339871 systemd[1]: Stopped kubelet.service. Nov 1 00:43:04.355829 kernel: audit: type=1130 audit(1761957784.339:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:04.346913 systemd[1]: Starting kubelet.service... Nov 1 00:43:04.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:04.378583 kernel: audit: type=1131 audit(1761957784.344:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:04.405940 systemd[1]: Reloading. Nov 1 00:43:04.507193 /usr/lib/systemd/system-generators/torcx-generator[2007]: time="2025-11-01T00:43:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:43:04.514482 /usr/lib/systemd/system-generators/torcx-generator[2007]: time="2025-11-01T00:43:04Z" level=info msg="torcx already run" Nov 1 00:43:04.611928 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:43:04.611949 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:43:04.628773 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712578 kernel: audit: type=1400 audit(1761957784.697:264): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.732673 kernel: audit: type=1400 audit(1761957784.697:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.732753 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:43:04.732781 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:43:04.732802 kernel: audit: backlog limit exceeded Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.743411 kernel: audit: type=1400 audit(1761957784.697:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.743501 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.774031 kernel: audit: type=1400 audit(1761957784.697:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit: BPF prog-id=44 op=LOAD Nov 1 00:43:04.711000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit: BPF prog-id=45 op=LOAD Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.711000 audit: BPF prog-id=46 op=LOAD Nov 1 00:43:04.711000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:43:04.711000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.712000 audit: BPF prog-id=47 op=LOAD Nov 1 00:43:04.712000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit: BPF prog-id=48 op=LOAD Nov 1 00:43:04.714000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.739000 audit: BPF prog-id=49 op=LOAD Nov 1 00:43:04.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit: BPF prog-id=52 op=LOAD Nov 1 00:43:04.775000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit: BPF prog-id=53 op=LOAD Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.775000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.778000 audit: BPF prog-id=55 op=LOAD Nov 1 00:43:04.778000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit: BPF prog-id=56 op=LOAD Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.781000 audit: BPF prog-id=57 op=LOAD Nov 1 00:43:04.781000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:43:04.781000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:04.782000 audit: BPF prog-id=58 op=LOAD Nov 1 00:43:04.782000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:43:04.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:04.800712 systemd[1]: Started kubelet.service. Nov 1 00:43:04.804400 systemd[1]: Stopping kubelet.service... Nov 1 00:43:04.805078 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:43:04.805272 systemd[1]: Stopped kubelet.service. Nov 1 00:43:04.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:04.807002 systemd[1]: Starting kubelet.service... Nov 1 00:43:05.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:05.275024 systemd[1]: Started kubelet.service. Nov 1 00:43:05.316403 kubelet[2078]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:43:05.316862 kubelet[2078]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:43:05.316914 kubelet[2078]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:43:05.317025 kubelet[2078]: I1101 00:43:05.316992 2078 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:43:06.850919 kubelet[2078]: I1101 00:43:06.850876 2078 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:43:06.850919 kubelet[2078]: I1101 00:43:06.850905 2078 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:43:06.851375 kubelet[2078]: I1101 00:43:06.851209 2078 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:43:06.901115 kubelet[2078]: E1101 00:43:06.901077 2078 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.200.4.5:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:43:06.901514 kubelet[2078]: I1101 00:43:06.901486 2078 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:43:06.908691 kubelet[2078]: E1101 00:43:06.908649 2078 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:43:06.908799 kubelet[2078]: I1101 00:43:06.908692 2078 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:43:06.912969 kubelet[2078]: I1101 00:43:06.912947 2078 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:43:06.913230 kubelet[2078]: I1101 00:43:06.913195 2078 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:43:06.913393 kubelet[2078]: I1101 00:43:06.913228 2078 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-9f29a8c334","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:43:06.913546 kubelet[2078]: I1101 00:43:06.913401 2078 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:43:06.913546 kubelet[2078]: I1101 00:43:06.913414 2078 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:43:06.913671 kubelet[2078]: I1101 00:43:06.913562 2078 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:43:06.918963 kubelet[2078]: I1101 00:43:06.918940 2078 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:43:06.919051 kubelet[2078]: I1101 00:43:06.918975 2078 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:43:06.924518 kubelet[2078]: I1101 00:43:06.924498 2078 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:43:06.924613 kubelet[2078]: I1101 00:43:06.924533 2078 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:43:06.944674 kubelet[2078]: E1101 00:43:06.944629 2078 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.4.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-9f29a8c334&limit=500&resourceVersion=0\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:43:06.944879 kubelet[2078]: I1101 00:43:06.944866 2078 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:43:06.945544 kubelet[2078]: I1101 00:43:06.945519 2078 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:43:06.949581 kubelet[2078]: W1101 00:43:06.949547 2078 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:43:06.952740 kubelet[2078]: I1101 00:43:06.952725 2078 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:43:06.952885 kubelet[2078]: I1101 00:43:06.952874 2078 server.go:1289] "Started kubelet" Nov 1 00:43:06.970000 audit[2078]: AVC avc: denied { mac_admin } for pid=2078 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:06.970000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:43:06.970000 audit[2078]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00092fb90 a1=c000b48000 a2=c00092fb60 a3=25 items=0 ppid=1 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:06.970000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:43:06.972336 kubelet[2078]: I1101 00:43:06.972292 2078 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:43:06.971000 audit[2078]: AVC avc: denied { mac_admin } for pid=2078 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:06.971000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:43:06.971000 audit[2078]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a4a4c0 a1=c000a4c498 a2=c000a08690 a3=25 items=0 ppid=1 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:06.972675 kubelet[2078]: I1101 00:43:06.972638 2078 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:43:06.971000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:43:06.972839 kubelet[2078]: I1101 00:43:06.972822 2078 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:43:06.972983 kubelet[2078]: I1101 00:43:06.972972 2078 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:43:06.975250 kubelet[2078]: I1101 00:43:06.975225 2078 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:43:06.979054 kubelet[2078]: I1101 00:43:06.979031 2078 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:43:06.981637 kubelet[2078]: I1101 00:43:06.981618 2078 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:43:06.981876 kubelet[2078]: E1101 00:43:06.981840 2078 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" Nov 1 00:43:06.982360 kubelet[2078]: I1101 00:43:06.982335 2078 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:43:06.982431 kubelet[2078]: I1101 00:43:06.982385 2078 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:43:06.984155 kubelet[2078]: E1101 00:43:06.982786 2078 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.4.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:43:06.984155 kubelet[2078]: E1101 00:43:06.983341 2078 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.4.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:43:06.984155 kubelet[2078]: E1101 00:43:06.983423 2078 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.4.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-9f29a8c334?timeout=10s\": dial tcp 10.200.4.5:6443: connect: connection refused" interval="200ms" Nov 1 00:43:06.985541 kubelet[2078]: I1101 00:43:06.985490 2078 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:43:06.985873 kubelet[2078]: I1101 00:43:06.985856 2078 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:43:06.986000 audit[2093]: NETFILTER_CFG table=mangle:31 family=2 entries=2 op=nft_register_chain pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:06.986000 audit[2093]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffeead0bd60 a2=0 a3=7ffeead0bd4c items=0 ppid=2078 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:06.986000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:43:06.987673 kubelet[2078]: E1101 00:43:06.986093 2078 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.4.5:6443/api/v1/namespaces/default/events\": dial tcp 10.200.4.5:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-9f29a8c334.1873bb45a08eafa2 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-9f29a8c334,UID:ci-3510.3.8-n-9f29a8c334,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-9f29a8c334,},FirstTimestamp:2025-11-01 00:43:06.952839074 +0000 UTC m=+1.671852759,LastTimestamp:2025-11-01 00:43:06.952839074 +0000 UTC m=+1.671852759,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-9f29a8c334,}" Nov 1 00:43:06.993573 kubelet[2078]: I1101 00:43:06.988007 2078 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:43:06.993573 kubelet[2078]: I1101 00:43:06.988081 2078 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:43:06.993573 kubelet[2078]: I1101 00:43:06.990486 2078 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:43:06.994000 audit[2094]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_chain pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:06.994000 audit[2094]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed29003b0 a2=0 a3=7ffed290039c items=0 ppid=2078 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:06.994000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:43:06.997000 audit[2096]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:06.997000 audit[2096]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe865f7cd0 a2=0 a3=7ffe865f7cbc items=0 ppid=2078 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:06.997000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:43:06.999000 audit[2098]: NETFILTER_CFG table=filter:34 family=2 entries=2 op=nft_register_chain pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:06.999000 audit[2098]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff1b86b850 a2=0 a3=7fff1b86b83c items=0 ppid=2078 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:06.999000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:43:07.016669 kubelet[2078]: E1101 00:43:07.016646 2078 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:43:07.033292 kubelet[2078]: I1101 00:43:07.033276 2078 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:43:07.033390 kubelet[2078]: I1101 00:43:07.033381 2078 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:43:07.033448 kubelet[2078]: I1101 00:43:07.033437 2078 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:43:07.043000 audit[2105]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_rule pid=2105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:07.043000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffeaeac5da0 a2=0 a3=7ffeaeac5d8c items=0 ppid=2078 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.043000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:43:07.044067 kubelet[2078]: I1101 00:43:07.043990 2078 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:43:07.044000 audit[2106]: NETFILTER_CFG table=mangle:36 family=10 entries=2 op=nft_register_chain pid=2106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:07.044000 audit[2106]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffff3670f00 a2=0 a3=7ffff3670eec items=0 ppid=2078 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.044000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:43:07.045399 kubelet[2078]: I1101 00:43:07.045312 2078 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:43:07.045399 kubelet[2078]: I1101 00:43:07.045328 2078 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:43:07.045399 kubelet[2078]: I1101 00:43:07.045353 2078 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:43:07.045399 kubelet[2078]: I1101 00:43:07.045363 2078 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:43:07.045605 kubelet[2078]: E1101 00:43:07.045405 2078 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:43:07.045000 audit[2107]: NETFILTER_CFG table=mangle:37 family=2 entries=1 op=nft_register_chain pid=2107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:07.045000 audit[2107]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec41e34e0 a2=0 a3=7ffec41e34cc items=0 ppid=2078 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.045000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:43:07.045000 audit[2108]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:07.045000 audit[2108]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec473bc10 a2=0 a3=7ffec473bbfc items=0 ppid=2078 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.045000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:43:07.046000 audit[2109]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2109 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:07.046000 audit[2109]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffee1409ce0 a2=0 a3=7ffee1409ccc items=0 ppid=2078 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:43:07.048111 kubelet[2078]: E1101 00:43:07.048028 2078 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.200.4.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:43:07.048619 kubelet[2078]: I1101 00:43:07.048601 2078 policy_none.go:49] "None policy: Start" Nov 1 00:43:07.048698 kubelet[2078]: I1101 00:43:07.048624 2078 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:43:07.048698 kubelet[2078]: I1101 00:43:07.048639 2078 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:43:07.048000 audit[2110]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:07.048000 audit[2110]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffe06c9870 a2=0 a3=7fffe06c985c items=0 ppid=2078 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.048000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:43:07.049000 audit[2111]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:07.049000 audit[2111]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6425e6b0 a2=0 a3=7ffd6425e69c items=0 ppid=2078 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.049000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:43:07.050000 audit[2112]: NETFILTER_CFG table=filter:42 family=10 entries=2 op=nft_register_chain pid=2112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:07.050000 audit[2112]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcbc103f10 a2=0 a3=7ffcbc103efc items=0 ppid=2078 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.050000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:43:07.056447 systemd[1]: Created slice kubepods.slice. Nov 1 00:43:07.061116 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:43:07.063916 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:43:07.070459 kubelet[2078]: E1101 00:43:07.070436 2078 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:43:07.069000 audit[2078]: AVC avc: denied { mac_admin } for pid=2078 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:07.069000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:43:07.069000 audit[2078]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e401e0 a1=c000e349a8 a2=c000e401b0 a3=25 items=0 ppid=1 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:07.069000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:43:07.070807 kubelet[2078]: E1101 00:43:07.070496 2078 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:43:07.070807 kubelet[2078]: I1101 00:43:07.070617 2078 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:43:07.070807 kubelet[2078]: I1101 00:43:07.070630 2078 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:43:07.071386 kubelet[2078]: I1101 00:43:07.071244 2078 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:43:07.072278 kubelet[2078]: E1101 00:43:07.072259 2078 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:43:07.072432 kubelet[2078]: E1101 00:43:07.072400 2078 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-9f29a8c334\" not found" Nov 1 00:43:07.172150 kubelet[2078]: I1101 00:43:07.172040 2078 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.173045 kubelet[2078]: E1101 00:43:07.173019 2078 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.4.5:6443/api/v1/nodes\": dial tcp 10.200.4.5:6443: connect: connection refused" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.177965 systemd[1]: Created slice kubepods-burstable-pod2b9f4ebc5d065b2ffa844a1880fef698.slice. Nov 1 00:43:07.183844 kubelet[2078]: E1101 00:43:07.183818 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.184084 kubelet[2078]: E1101 00:43:07.184058 2078 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.4.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-9f29a8c334?timeout=10s\": dial tcp 10.200.4.5:6443: connect: connection refused" interval="400ms" Nov 1 00:43:07.184209 kubelet[2078]: I1101 00:43:07.184188 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.184277 kubelet[2078]: I1101 00:43:07.184222 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.184277 kubelet[2078]: I1101 00:43:07.184248 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2b9f4ebc5d065b2ffa844a1880fef698-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-9f29a8c334\" (UID: \"2b9f4ebc5d065b2ffa844a1880fef698\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.184277 kubelet[2078]: I1101 00:43:07.184270 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2b9f4ebc5d065b2ffa844a1880fef698-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-9f29a8c334\" (UID: \"2b9f4ebc5d065b2ffa844a1880fef698\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.184410 kubelet[2078]: I1101 00:43:07.184292 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2b9f4ebc5d065b2ffa844a1880fef698-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-9f29a8c334\" (UID: \"2b9f4ebc5d065b2ffa844a1880fef698\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.184410 kubelet[2078]: I1101 00:43:07.184322 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.184410 kubelet[2078]: I1101 00:43:07.184345 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.184410 kubelet[2078]: I1101 00:43:07.184367 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.191020 systemd[1]: Created slice kubepods-burstable-podf5a4cee60e2492a90381477f85b2ca7d.slice. Nov 1 00:43:07.192760 kubelet[2078]: E1101 00:43:07.192738 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.206051 systemd[1]: Created slice kubepods-burstable-pod311573d3c0cc3833ac2fed8ba2c9d810.slice. Nov 1 00:43:07.207805 kubelet[2078]: E1101 00:43:07.207787 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.285185 kubelet[2078]: I1101 00:43:07.285143 2078 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/311573d3c0cc3833ac2fed8ba2c9d810-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-9f29a8c334\" (UID: \"311573d3c0cc3833ac2fed8ba2c9d810\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.375163 kubelet[2078]: I1101 00:43:07.375131 2078 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.375515 kubelet[2078]: E1101 00:43:07.375476 2078 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.4.5:6443/api/v1/nodes\": dial tcp 10.200.4.5:6443: connect: connection refused" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.383002 kubelet[2078]: E1101 00:43:07.382917 2078 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.4.5:6443/api/v1/namespaces/default/events\": dial tcp 10.200.4.5:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-9f29a8c334.1873bb45a08eafa2 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-9f29a8c334,UID:ci-3510.3.8-n-9f29a8c334,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-9f29a8c334,},FirstTimestamp:2025-11-01 00:43:06.952839074 +0000 UTC m=+1.671852759,LastTimestamp:2025-11-01 00:43:06.952839074 +0000 UTC m=+1.671852759,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-9f29a8c334,}" Nov 1 00:43:07.485941 env[1431]: time="2025-11-01T00:43:07.485884270Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-9f29a8c334,Uid:2b9f4ebc5d065b2ffa844a1880fef698,Namespace:kube-system,Attempt:0,}" Nov 1 00:43:07.495178 env[1431]: time="2025-11-01T00:43:07.495144513Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-9f29a8c334,Uid:f5a4cee60e2492a90381477f85b2ca7d,Namespace:kube-system,Attempt:0,}" Nov 1 00:43:07.509114 env[1431]: time="2025-11-01T00:43:07.509076778Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-9f29a8c334,Uid:311573d3c0cc3833ac2fed8ba2c9d810,Namespace:kube-system,Attempt:0,}" Nov 1 00:43:07.584830 kubelet[2078]: E1101 00:43:07.584783 2078 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.4.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-9f29a8c334?timeout=10s\": dial tcp 10.200.4.5:6443: connect: connection refused" interval="800ms" Nov 1 00:43:07.777241 kubelet[2078]: I1101 00:43:07.777028 2078 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.777758 kubelet[2078]: E1101 00:43:07.777722 2078 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.4.5:6443/api/v1/nodes\": dial tcp 10.200.4.5:6443: connect: connection refused" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:07.876726 kubelet[2078]: E1101 00:43:07.876686 2078 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.4.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:43:07.896141 kubelet[2078]: E1101 00:43:07.896101 2078 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.4.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-9f29a8c334&limit=500&resourceVersion=0\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:43:08.372833 kubelet[2078]: E1101 00:43:08.372791 2078 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.4.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:43:08.385500 kubelet[2078]: E1101 00:43:08.385462 2078 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.4.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-9f29a8c334?timeout=10s\": dial tcp 10.200.4.5:6443: connect: connection refused" interval="1.6s" Nov 1 00:43:08.493413 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2544929038.mount: Deactivated successfully. Nov 1 00:43:08.524450 env[1431]: time="2025-11-01T00:43:08.524399927Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.527108 env[1431]: time="2025-11-01T00:43:08.527071195Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.536000 env[1431]: time="2025-11-01T00:43:08.535965022Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.538568 env[1431]: time="2025-11-01T00:43:08.538524888Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.541472 env[1431]: time="2025-11-01T00:43:08.541436662Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.542729 kubelet[2078]: E1101 00:43:08.542699 2078 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.200.4.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.4.5:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:43:08.543727 env[1431]: time="2025-11-01T00:43:08.543698720Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.548008 env[1431]: time="2025-11-01T00:43:08.547977329Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.551062 env[1431]: time="2025-11-01T00:43:08.551030707Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.556260 env[1431]: time="2025-11-01T00:43:08.556229240Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.561332 env[1431]: time="2025-11-01T00:43:08.561298769Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.571657 env[1431]: time="2025-11-01T00:43:08.571624733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.579227 kubelet[2078]: I1101 00:43:08.579203 2078 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:08.579504 kubelet[2078]: E1101 00:43:08.579472 2078 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.4.5:6443/api/v1/nodes\": dial tcp 10.200.4.5:6443: connect: connection refused" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:08.594332 env[1431]: time="2025-11-01T00:43:08.594281211Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:08.612963 env[1431]: time="2025-11-01T00:43:08.612742083Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:43:08.612963 env[1431]: time="2025-11-01T00:43:08.612783884Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:43:08.612963 env[1431]: time="2025-11-01T00:43:08.612798984Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:43:08.613240 env[1431]: time="2025-11-01T00:43:08.613010889Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e007b5d3d7fd4e082ef8edc2e86497a870b0c7bfc9e2df0370da7b2868e0bf6d pid=2120 runtime=io.containerd.runc.v2 Nov 1 00:43:08.634856 env[1431]: time="2025-11-01T00:43:08.633964624Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:43:08.635105 env[1431]: time="2025-11-01T00:43:08.635070353Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:43:08.635211 env[1431]: time="2025-11-01T00:43:08.635188256Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:43:08.635453 env[1431]: time="2025-11-01T00:43:08.635418062Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/62565ab6983399e3c3cf6fa14796e963fbb0867b6a65c452d19e9091aefcbf0f pid=2140 runtime=io.containerd.runc.v2 Nov 1 00:43:08.645682 systemd[1]: Started cri-containerd-e007b5d3d7fd4e082ef8edc2e86497a870b0c7bfc9e2df0370da7b2868e0bf6d.scope. Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit: BPF prog-id=59 op=LOAD Nov 1 00:43:08.672000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2120 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303762356433643766643465303832656638656463326538363439 Nov 1 00:43:08.672000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.672000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2120 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303762356433643766643465303832656638656463326538363439 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit: BPF prog-id=60 op=LOAD Nov 1 00:43:08.673000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000222360 items=0 ppid=2120 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303762356433643766643465303832656638656463326538363439 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit: BPF prog-id=61 op=LOAD Nov 1 00:43:08.673000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002223a8 items=0 ppid=2120 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303762356433643766643465303832656638656463326538363439 Nov 1 00:43:08.673000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:43:08.673000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.673000 audit: BPF prog-id=62 op=LOAD Nov 1 00:43:08.673000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002227b8 items=0 ppid=2120 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530303762356433643766643465303832656638656463326538363439 Nov 1 00:43:08.681471 systemd[1]: Started cri-containerd-62565ab6983399e3c3cf6fa14796e963fbb0867b6a65c452d19e9091aefcbf0f.scope. Nov 1 00:43:08.690910 env[1431]: time="2025-11-01T00:43:08.690842977Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:43:08.691082 env[1431]: time="2025-11-01T00:43:08.691047182Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:43:08.691212 env[1431]: time="2025-11-01T00:43:08.691183085Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:43:08.691461 env[1431]: time="2025-11-01T00:43:08.691422091Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3c05f75e6eb78f816c887eae92abbef580a3faaf63194524fc78179feb657519 pid=2179 runtime=io.containerd.runc.v2 Nov 1 00:43:08.708393 systemd[1]: Started cri-containerd-3c05f75e6eb78f816c887eae92abbef580a3faaf63194524fc78179feb657519.scope. Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.713000 audit: BPF prog-id=63 op=LOAD Nov 1 00:43:08.714000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.714000 audit[2158]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2140 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353635616236393833333939653363336366366661313437393665 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2140 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353635616236393833333939653363336366366661313437393665 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.715000 audit: BPF prog-id=64 op=LOAD Nov 1 00:43:08.715000 audit[2158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002b2700 items=0 ppid=2140 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353635616236393833333939653363336366366661313437393665 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.716000 audit: BPF prog-id=65 op=LOAD Nov 1 00:43:08.716000 audit[2158]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002b2748 items=0 ppid=2140 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353635616236393833333939653363336366366661313437393665 Nov 1 00:43:08.716000 audit: BPF prog-id=65 op=UNLOAD Nov 1 00:43:08.717000 audit: BPF prog-id=64 op=UNLOAD Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { perfmon } for pid=2158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit[2158]: AVC avc: denied { bpf } for pid=2158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.717000 audit: BPF prog-id=66 op=LOAD Nov 1 00:43:08.717000 audit[2158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002b2b58 items=0 ppid=2140 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353635616236393833333939653363336366366661313437393665 Nov 1 00:43:08.740229 env[1431]: time="2025-11-01T00:43:08.740176236Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-9f29a8c334,Uid:2b9f4ebc5d065b2ffa844a1880fef698,Namespace:kube-system,Attempt:0,} returns sandbox id \"e007b5d3d7fd4e082ef8edc2e86497a870b0c7bfc9e2df0370da7b2868e0bf6d\"" Nov 1 00:43:08.750851 env[1431]: time="2025-11-01T00:43:08.750810708Z" level=info msg="CreateContainer within sandbox \"e007b5d3d7fd4e082ef8edc2e86497a870b0c7bfc9e2df0370da7b2868e0bf6d\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.752000 audit: BPF prog-id=67 op=LOAD Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2179 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363303566373565366562373866383136633838376561653932616262 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2179 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363303566373565366562373866383136633838376561653932616262 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit: BPF prog-id=68 op=LOAD Nov 1 00:43:08.753000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000090370 items=0 ppid=2179 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363303566373565366562373866383136633838376561653932616262 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit: BPF prog-id=69 op=LOAD Nov 1 00:43:08.753000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000903b8 items=0 ppid=2179 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363303566373565366562373866383136633838376561653932616262 Nov 1 00:43:08.753000 audit: BPF prog-id=69 op=UNLOAD Nov 1 00:43:08.753000 audit: BPF prog-id=68 op=UNLOAD Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.753000 audit: BPF prog-id=70 op=LOAD Nov 1 00:43:08.753000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000907c8 items=0 ppid=2179 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363303566373565366562373866383136633838376561653932616262 Nov 1 00:43:08.775571 env[1431]: time="2025-11-01T00:43:08.772666866Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-9f29a8c334,Uid:f5a4cee60e2492a90381477f85b2ca7d,Namespace:kube-system,Attempt:0,} returns sandbox id \"62565ab6983399e3c3cf6fa14796e963fbb0867b6a65c452d19e9091aefcbf0f\"" Nov 1 00:43:08.779865 env[1431]: time="2025-11-01T00:43:08.779812948Z" level=info msg="CreateContainer within sandbox \"62565ab6983399e3c3cf6fa14796e963fbb0867b6a65c452d19e9091aefcbf0f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:43:08.793623 env[1431]: time="2025-11-01T00:43:08.792786379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-9f29a8c334,Uid:311573d3c0cc3833ac2fed8ba2c9d810,Namespace:kube-system,Attempt:0,} returns sandbox id \"3c05f75e6eb78f816c887eae92abbef580a3faaf63194524fc78179feb657519\"" Nov 1 00:43:08.799635 env[1431]: time="2025-11-01T00:43:08.799604953Z" level=info msg="CreateContainer within sandbox \"3c05f75e6eb78f816c887eae92abbef580a3faaf63194524fc78179feb657519\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:43:08.809394 env[1431]: time="2025-11-01T00:43:08.809368803Z" level=info msg="CreateContainer within sandbox \"e007b5d3d7fd4e082ef8edc2e86497a870b0c7bfc9e2df0370da7b2868e0bf6d\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"76f5294e225220cdab0fc879aaf75b7115cc51f4dd8916516b3940c24abdf78b\"" Nov 1 00:43:08.809994 env[1431]: time="2025-11-01T00:43:08.809966918Z" level=info msg="StartContainer for \"76f5294e225220cdab0fc879aaf75b7115cc51f4dd8916516b3940c24abdf78b\"" Nov 1 00:43:08.823191 env[1431]: time="2025-11-01T00:43:08.823157955Z" level=info msg="CreateContainer within sandbox \"62565ab6983399e3c3cf6fa14796e963fbb0867b6a65c452d19e9091aefcbf0f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"267d6ac765d304d831c755d94c021f07e8ee65711d877210afb6e6f84e3bd66d\"" Nov 1 00:43:08.823543 env[1431]: time="2025-11-01T00:43:08.823515864Z" level=info msg="StartContainer for \"267d6ac765d304d831c755d94c021f07e8ee65711d877210afb6e6f84e3bd66d\"" Nov 1 00:43:08.830283 systemd[1]: Started cri-containerd-76f5294e225220cdab0fc879aaf75b7115cc51f4dd8916516b3940c24abdf78b.scope. Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.848000 audit: BPF prog-id=71 op=LOAD Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2120 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663532393465323235323230636461623066633837396161663735 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2120 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663532393465323235323230636461623066633837396161663735 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit: BPF prog-id=72 op=LOAD Nov 1 00:43:08.849000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000388370 items=0 ppid=2120 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663532393465323235323230636461623066633837396161663735 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit: BPF prog-id=73 op=LOAD Nov 1 00:43:08.849000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003883b8 items=0 ppid=2120 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663532393465323235323230636461623066633837396161663735 Nov 1 00:43:08.849000 audit: BPF prog-id=73 op=UNLOAD Nov 1 00:43:08.849000 audit: BPF prog-id=72 op=UNLOAD Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { perfmon } for pid=2247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit[2247]: AVC avc: denied { bpf } for pid=2247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.849000 audit: BPF prog-id=74 op=LOAD Nov 1 00:43:08.849000 audit[2247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003887c8 items=0 ppid=2120 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663532393465323235323230636461623066633837396161663735 Nov 1 00:43:08.852937 env[1431]: time="2025-11-01T00:43:08.852888314Z" level=info msg="CreateContainer within sandbox \"3c05f75e6eb78f816c887eae92abbef580a3faaf63194524fc78179feb657519\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d81f4891676d2799ae5d95ba3dd9035ecfb56c7511de954fa54ee0bb32b8cf4d\"" Nov 1 00:43:08.853590 env[1431]: time="2025-11-01T00:43:08.853525130Z" level=info msg="StartContainer for \"d81f4891676d2799ae5d95ba3dd9035ecfb56c7511de954fa54ee0bb32b8cf4d\"" Nov 1 00:43:08.862958 systemd[1]: Started cri-containerd-267d6ac765d304d831c755d94c021f07e8ee65711d877210afb6e6f84e3bd66d.scope. Nov 1 00:43:08.881214 systemd[1]: Started cri-containerd-d81f4891676d2799ae5d95ba3dd9035ecfb56c7511de954fa54ee0bb32b8cf4d.scope. Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.897000 audit: BPF prog-id=75 op=LOAD Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2140 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376436616337363564333034643833316337353564393463303231 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2140 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376436616337363564333034643833316337353564393463303231 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.898000 audit: BPF prog-id=76 op=LOAD Nov 1 00:43:08.898000 audit[2271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003482f0 items=0 ppid=2140 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376436616337363564333034643833316337353564393463303231 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit: BPF prog-id=77 op=LOAD Nov 1 00:43:08.899000 audit[2271]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000348338 items=0 ppid=2140 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376436616337363564333034643833316337353564393463303231 Nov 1 00:43:08.899000 audit: BPF prog-id=77 op=UNLOAD Nov 1 00:43:08.899000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { perfmon } for pid=2271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit[2271]: AVC avc: denied { bpf } for pid=2271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.899000 audit: BPF prog-id=78 op=LOAD Nov 1 00:43:08.899000 audit[2271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000348748 items=0 ppid=2140 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376436616337363564333034643833316337353564393463303231 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.924000 audit: BPF prog-id=79 op=LOAD Nov 1 00:43:08.925000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.925000 audit[2287]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2179 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438316634383931363736643237393961653564393562613364643930 Nov 1 00:43:08.925000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.925000 audit[2287]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2179 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438316634383931363736643237393961653564393562613364643930 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.926000 audit: BPF prog-id=80 op=LOAD Nov 1 00:43:08.926000 audit[2287]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000215880 items=0 ppid=2179 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438316634383931363736643237393961653564393562613364643930 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.927000 audit: BPF prog-id=81 op=LOAD Nov 1 00:43:08.927000 audit[2287]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002158c8 items=0 ppid=2179 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438316634383931363736643237393961653564393562613364643930 Nov 1 00:43:08.927000 audit: BPF prog-id=81 op=UNLOAD Nov 1 00:43:08.928000 audit: BPF prog-id=80 op=UNLOAD Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { perfmon } for pid=2287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit[2287]: AVC avc: denied { bpf } for pid=2287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:08.928000 audit: BPF prog-id=82 op=LOAD Nov 1 00:43:08.928000 audit[2287]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000215cd8 items=0 ppid=2179 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:08.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438316634383931363736643237393961653564393562613364643930 Nov 1 00:43:08.967409 env[1431]: time="2025-11-01T00:43:08.967352636Z" level=info msg="StartContainer for \"76f5294e225220cdab0fc879aaf75b7115cc51f4dd8916516b3940c24abdf78b\" returns successfully" Nov 1 00:43:08.967601 env[1431]: time="2025-11-01T00:43:08.967485339Z" level=info msg="StartContainer for \"267d6ac765d304d831c755d94c021f07e8ee65711d877210afb6e6f84e3bd66d\" returns successfully" Nov 1 00:43:09.009345 env[1431]: time="2025-11-01T00:43:09.009296501Z" level=info msg="StartContainer for \"d81f4891676d2799ae5d95ba3dd9035ecfb56c7511de954fa54ee0bb32b8cf4d\" returns successfully" Nov 1 00:43:09.058373 kubelet[2078]: E1101 00:43:09.058337 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:09.085217 kubelet[2078]: E1101 00:43:09.085181 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:09.090118 kubelet[2078]: E1101 00:43:09.090091 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:10.091954 kubelet[2078]: E1101 00:43:10.091909 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:10.092383 kubelet[2078]: E1101 00:43:10.092349 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:10.181811 kubelet[2078]: I1101 00:43:10.181775 2078 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:10.642595 kubelet[2078]: E1101 00:43:10.642544 2078 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.289589 kernel: kauditd_printk_skb: 619 callbacks suppressed Nov 1 00:43:11.289735 kernel: audit: type=1400 audit(1761957791.274:531): avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=525666 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.274000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=525666 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.274000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c005f593b0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.330584 kernel: audit: type=1300 audit(1761957791.274:531): arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c005f593b0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.274000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.353575 kernel: audit: type=1327 audit(1761957791.274:531): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.306000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.396033 kernel: audit: type=1400 audit(1761957791.306:532): avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.396141 kernel: audit: type=1300 audit(1761957791.306:532): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c005f593e0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.306000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c005f593e0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.419576 kernel: audit: type=1327 audit(1761957791.306:532): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.517000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.536751 kernel: audit: type=1400 audit(1761957791.517:533): avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.517000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c004af6120 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.564912 kubelet[2078]: E1101 00:43:11.544537 2078 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-9f29a8c334\" not found" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.566037 kernel: audit: type=1300 audit(1761957791.517:533): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c004af6120 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.517000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.589210 kernel: audit: type=1327 audit(1761957791.517:533): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.517000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.517000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c006bdc420 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.517000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.517000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.517000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c004af61c0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.517000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.517000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=525660 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.517000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c006bdc8a0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:43:11.608583 kernel: audit: type=1400 audit(1761957791.517:534): avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:11.517000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:43:11.648356 kubelet[2078]: I1101 00:43:11.648323 2078 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.648519 kubelet[2078]: E1101 00:43:11.648377 2078 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ci-3510.3.8-n-9f29a8c334\": node \"ci-3510.3.8-n-9f29a8c334\" not found" Nov 1 00:43:11.683004 kubelet[2078]: I1101 00:43:11.682975 2078 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.765778 kubelet[2078]: E1101 00:43:11.765740 2078 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.765778 kubelet[2078]: I1101 00:43:11.765775 2078 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.782778 kubelet[2078]: E1101 00:43:11.782745 2078 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-9f29a8c334\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.782778 kubelet[2078]: I1101 00:43:11.782777 2078 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.798927 kubelet[2078]: E1101 00:43:11.798896 2078 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-9f29a8c334\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:11.962321 kubelet[2078]: I1101 00:43:11.962038 2078 apiserver.go:52] "Watching apiserver" Nov 1 00:43:11.982562 kubelet[2078]: I1101 00:43:11.982520 2078 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:43:12.082000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:12.082000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004fc0f0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:12.082000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:12.085000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:12.085000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0001043a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:12.085000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:12.922093 kubelet[2078]: I1101 00:43:12.922057 2078 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:12.929225 kubelet[2078]: I1101 00:43:12.929191 2078 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:43:13.537281 systemd[1]: Reloading. Nov 1 00:43:13.601043 /usr/lib/systemd/system-generators/torcx-generator[2374]: time="2025-11-01T00:43:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:43:13.601531 /usr/lib/systemd/system-generators/torcx-generator[2374]: time="2025-11-01T00:43:13Z" level=info msg="torcx already run" Nov 1 00:43:13.718004 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:43:13.718025 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:43:13.736304 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit: BPF prog-id=83 op=LOAD Nov 1 00:43:13.819000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit: BPF prog-id=84 op=LOAD Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit: BPF prog-id=85 op=LOAD Nov 1 00:43:13.820000 audit: BPF prog-id=45 op=UNLOAD Nov 1 00:43:13.820000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.821000 audit: BPF prog-id=86 op=LOAD Nov 1 00:43:13.821000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.822000 audit: BPF prog-id=87 op=LOAD Nov 1 00:43:13.822000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit: BPF prog-id=88 op=LOAD Nov 1 00:43:13.823000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit: BPF prog-id=89 op=LOAD Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.823000 audit: BPF prog-id=90 op=LOAD Nov 1 00:43:13.823000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:43:13.823000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit: BPF prog-id=91 op=LOAD Nov 1 00:43:13.825000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit: BPF prog-id=92 op=LOAD Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.825000 audit: BPF prog-id=93 op=LOAD Nov 1 00:43:13.825000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:43:13.825000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.826000 audit: BPF prog-id=94 op=LOAD Nov 1 00:43:13.826000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:43:13.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit: BPF prog-id=95 op=LOAD Nov 1 00:43:13.829000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.829000 audit: BPF prog-id=96 op=LOAD Nov 1 00:43:13.829000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.831000 audit: BPF prog-id=97 op=LOAD Nov 1 00:43:13.831000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.834000 audit: BPF prog-id=98 op=LOAD Nov 1 00:43:13.834000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit: BPF prog-id=99 op=LOAD Nov 1 00:43:13.836000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.836000 audit: BPF prog-id=100 op=LOAD Nov 1 00:43:13.836000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit: BPF prog-id=101 op=LOAD Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.837000 audit: BPF prog-id=102 op=LOAD Nov 1 00:43:13.837000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:43:13.837000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:13.838000 audit: BPF prog-id=103 op=LOAD Nov 1 00:43:13.838000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:43:13.855261 systemd[1]: Stopping kubelet.service... Nov 1 00:43:13.855883 kubelet[2078]: I1101 00:43:13.855596 2078 dynamic_cafile_content.go:175] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:43:13.881827 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:43:13.882025 systemd[1]: Stopped kubelet.service. Nov 1 00:43:13.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:13.882088 systemd[1]: kubelet.service: Consumed 1.391s CPU time. Nov 1 00:43:13.884041 systemd[1]: Starting kubelet.service... Nov 1 00:43:15.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:15.288058 systemd[1]: Started kubelet.service. Nov 1 00:43:16.145162 kubelet[2441]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:43:16.145621 kubelet[2441]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:43:16.145621 kubelet[2441]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:43:16.145772 kubelet[2441]: I1101 00:43:16.145687 2441 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:43:16.158451 kubelet[2441]: I1101 00:43:16.158415 2441 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:43:16.158693 kubelet[2441]: I1101 00:43:16.158678 2441 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:43:16.159162 kubelet[2441]: I1101 00:43:16.159121 2441 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:43:16.161122 kubelet[2441]: I1101 00:43:16.161096 2441 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Nov 1 00:43:16.165455 kubelet[2441]: I1101 00:43:16.165432 2441 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:43:16.174946 kubelet[2441]: E1101 00:43:16.174914 2441 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:43:16.174946 kubelet[2441]: I1101 00:43:16.174943 2441 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:43:16.180482 kubelet[2441]: I1101 00:43:16.180438 2441 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:43:16.180771 kubelet[2441]: I1101 00:43:16.180744 2441 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:43:16.188118 kubelet[2441]: I1101 00:43:16.180769 2441 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-9f29a8c334","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:43:16.188118 kubelet[2441]: I1101 00:43:16.181025 2441 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:43:16.188118 kubelet[2441]: I1101 00:43:16.181053 2441 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:43:16.188118 kubelet[2441]: I1101 00:43:16.181101 2441 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:43:16.188118 kubelet[2441]: I1101 00:43:16.182032 2441 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:43:16.188439 kubelet[2441]: I1101 00:43:16.182056 2441 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:43:16.188439 kubelet[2441]: I1101 00:43:16.182105 2441 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:43:16.188439 kubelet[2441]: I1101 00:43:16.182125 2441 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:43:16.191767 kubelet[2441]: I1101 00:43:16.191749 2441 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:43:16.192483 kubelet[2441]: I1101 00:43:16.192465 2441 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:43:16.197160 kubelet[2441]: I1101 00:43:16.197141 2441 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:43:16.197253 kubelet[2441]: I1101 00:43:16.197187 2441 server.go:1289] "Started kubelet" Nov 1 00:43:16.198000 audit[2441]: AVC avc: denied { mac_admin } for pid=2441 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:16.198000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:43:16.198000 audit[2441]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008cc7b0 a1=c000734af8 a2=c0008cc780 a3=25 items=0 ppid=1 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:16.198000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:43:16.200776 kubelet[2441]: I1101 00:43:16.200756 2441 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:43:16.199000 audit[2441]: AVC avc: denied { mac_admin } for pid=2441 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:16.199000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:43:16.199000 audit[2441]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00072dd80 a1=c000734b10 a2=c0008cc840 a3=25 items=0 ppid=1 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:16.199000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:43:16.201097 kubelet[2441]: I1101 00:43:16.201083 2441 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:43:16.201187 kubelet[2441]: I1101 00:43:16.201178 2441 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:43:16.209849 kubelet[2441]: E1101 00:43:16.209723 2441 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:43:16.214827 kubelet[2441]: I1101 00:43:16.214785 2441 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:43:16.216120 kubelet[2441]: I1101 00:43:16.216101 2441 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:43:16.216374 kubelet[2441]: I1101 00:43:16.216355 2441 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:43:16.219943 kubelet[2441]: I1101 00:43:16.219928 2441 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:43:16.220107 kubelet[2441]: I1101 00:43:16.220098 2441 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:43:16.220626 kubelet[2441]: I1101 00:43:16.220579 2441 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:43:16.220779 kubelet[2441]: I1101 00:43:16.220761 2441 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:43:16.222037 kubelet[2441]: I1101 00:43:16.222010 2441 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:43:16.223391 kubelet[2441]: I1101 00:43:16.223359 2441 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:43:16.227314 kubelet[2441]: I1101 00:43:16.226420 2441 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:43:16.234906 kubelet[2441]: I1101 00:43:16.234878 2441 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:43:16.234906 kubelet[2441]: I1101 00:43:16.234906 2441 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:43:16.235041 kubelet[2441]: I1101 00:43:16.234928 2441 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:43:16.235041 kubelet[2441]: I1101 00:43:16.234936 2441 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:43:16.235041 kubelet[2441]: E1101 00:43:16.234987 2441 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:43:16.235198 kubelet[2441]: I1101 00:43:16.235185 2441 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:43:16.235198 kubelet[2441]: I1101 00:43:16.235197 2441 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:43:16.302511 kubelet[2441]: I1101 00:43:16.302356 2441 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:43:16.302511 kubelet[2441]: I1101 00:43:16.302382 2441 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:43:16.302511 kubelet[2441]: I1101 00:43:16.302402 2441 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:43:16.302792 kubelet[2441]: I1101 00:43:16.302546 2441 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:43:16.302792 kubelet[2441]: I1101 00:43:16.302571 2441 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:43:16.302792 kubelet[2441]: I1101 00:43:16.302595 2441 policy_none.go:49] "None policy: Start" Nov 1 00:43:16.302792 kubelet[2441]: I1101 00:43:16.302607 2441 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:43:16.302792 kubelet[2441]: I1101 00:43:16.302619 2441 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:43:16.302792 kubelet[2441]: I1101 00:43:16.302725 2441 state_mem.go:75] "Updated machine memory state" Nov 1 00:43:16.308616 kubelet[2441]: E1101 00:43:16.308379 2441 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:43:16.308616 kubelet[2441]: E1101 00:43:16.308446 2441 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:43:16.308616 kubelet[2441]: I1101 00:43:16.308600 2441 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:43:16.308831 kubelet[2441]: I1101 00:43:16.308613 2441 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:43:16.320704 kernel: kauditd_printk_skb: 268 callbacks suppressed Nov 1 00:43:16.320788 kernel: audit: type=1400 audit(1761957796.306:787): avc: denied { mac_admin } for pid=2441 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:16.306000 audit[2441]: AVC avc: denied { mac_admin } for pid=2441 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:16.320879 kubelet[2441]: I1101 00:43:16.310616 2441 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:43:16.320879 kubelet[2441]: E1101 00:43:16.311134 2441 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:43:16.306000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:43:16.340347 kernel: audit: type=1401 audit(1761957796.306:787): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:43:16.341319 kernel: audit: type=1300 audit(1761957796.306:787): arch=c000003e syscall=188 success=no exit=-22 a0=c0004a3650 a1=c000ee44c8 a2=c0004a3620 a3=25 items=0 ppid=1 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:16.306000 audit[2441]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0004a3650 a1=c000ee44c8 a2=c0004a3620 a3=25 items=0 ppid=1 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:16.341452 kubelet[2441]: I1101 00:43:16.336237 2441 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.341452 kubelet[2441]: I1101 00:43:16.336629 2441 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.342304 kubelet[2441]: I1101 00:43:16.342291 2441 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.357193 kernel: audit: type=1327 audit(1761957796.306:787): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:43:16.306000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:43:16.359679 kubelet[2441]: I1101 00:43:16.359662 2441 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:43:16.359864 kubelet[2441]: I1101 00:43:16.359839 2441 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:43:16.379195 kubelet[2441]: I1101 00:43:16.379172 2441 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:43:16.379317 kubelet[2441]: E1101 00:43:16.379233 2441 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-9f29a8c334\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.420655 kubelet[2441]: I1101 00:43:16.420531 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2b9f4ebc5d065b2ffa844a1880fef698-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-9f29a8c334\" (UID: \"2b9f4ebc5d065b2ffa844a1880fef698\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.420882 kubelet[2441]: I1101 00:43:16.420859 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.420976 kubelet[2441]: I1101 00:43:16.420961 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.421047 kubelet[2441]: I1101 00:43:16.421031 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2b9f4ebc5d065b2ffa844a1880fef698-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-9f29a8c334\" (UID: \"2b9f4ebc5d065b2ffa844a1880fef698\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.421135 kubelet[2441]: I1101 00:43:16.421120 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.421215 kubelet[2441]: I1101 00:43:16.421201 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.421289 kubelet[2441]: I1101 00:43:16.421275 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f5a4cee60e2492a90381477f85b2ca7d-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-9f29a8c334\" (UID: \"f5a4cee60e2492a90381477f85b2ca7d\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.421359 kubelet[2441]: I1101 00:43:16.421345 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/311573d3c0cc3833ac2fed8ba2c9d810-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-9f29a8c334\" (UID: \"311573d3c0cc3833ac2fed8ba2c9d810\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.421428 kubelet[2441]: I1101 00:43:16.421416 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2b9f4ebc5d065b2ffa844a1880fef698-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-9f29a8c334\" (UID: \"2b9f4ebc5d065b2ffa844a1880fef698\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.432265 kubelet[2441]: I1101 00:43:16.432244 2441 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.449102 kubelet[2441]: I1101 00:43:16.449075 2441 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:16.449599 kubelet[2441]: I1101 00:43:16.449576 2441 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:17.188921 kubelet[2441]: I1101 00:43:17.188882 2441 apiserver.go:52] "Watching apiserver" Nov 1 00:43:17.220794 kubelet[2441]: I1101 00:43:17.220764 2441 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:43:17.264844 kubelet[2441]: I1101 00:43:17.264783 2441 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:17.277330 kubelet[2441]: I1101 00:43:17.277304 2441 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:43:17.277544 kubelet[2441]: E1101 00:43:17.277528 2441 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-9f29a8c334\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:17.297818 kubelet[2441]: I1101 00:43:17.297753 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9f29a8c334" podStartSLOduration=1.297736779 podStartE2EDuration="1.297736779s" podCreationTimestamp="2025-11-01 00:43:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:43:17.288904999 +0000 UTC m=+1.992932367" watchObservedRunningTime="2025-11-01 00:43:17.297736779 +0000 UTC m=+2.001764247" Nov 1 00:43:17.298137 kubelet[2441]: I1101 00:43:17.298099 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9f29a8c334" podStartSLOduration=5.298090087 podStartE2EDuration="5.298090087s" podCreationTimestamp="2025-11-01 00:43:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:43:17.298036085 +0000 UTC m=+2.002063553" watchObservedRunningTime="2025-11-01 00:43:17.298090087 +0000 UTC m=+2.002117455" Nov 1 00:43:17.306704 kubelet[2441]: I1101 00:43:17.306658 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9f29a8c334" podStartSLOduration=1.306646561 podStartE2EDuration="1.306646561s" podCreationTimestamp="2025-11-01 00:43:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:43:17.306641161 +0000 UTC m=+2.010668529" watchObservedRunningTime="2025-11-01 00:43:17.306646561 +0000 UTC m=+2.010674029" Nov 1 00:43:19.273000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=525691 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:43:19.294587 kernel: audit: type=1400 audit(1761957799.273:788): avc: denied { watch } for pid=2297 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=525691 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:43:19.273000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001004180 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:19.273000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:19.332701 kernel: audit: type=1300 audit(1761957799.273:788): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001004180 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:19.332804 kernel: audit: type=1327 audit(1761957799.273:788): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:20.372000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:20.372000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e484c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:20.411852 kernel: audit: type=1400 audit(1761957800.372:789): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:20.411967 kernel: audit: type=1300 audit(1761957800.372:789): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e484c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:20.411999 kernel: audit: type=1327 audit(1761957800.372:789): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:20.372000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:20.374000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:20.374000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e48680 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:20.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:20.374000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:20.374000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e486a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:20.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:20.374000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:43:20.374000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e486c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:43:20.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:43:21.189748 kubelet[2441]: I1101 00:43:21.189714 2441 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:43:21.190269 env[1431]: time="2025-11-01T00:43:21.190128169Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:43:21.190616 kubelet[2441]: I1101 00:43:21.190383 2441 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:43:21.858326 kubelet[2441]: I1101 00:43:21.858287 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/5ad97c05-49d0-4a6f-ac04-bfdd658a6166-kube-proxy\") pod \"kube-proxy-rrf75\" (UID: \"5ad97c05-49d0-4a6f-ac04-bfdd658a6166\") " pod="kube-system/kube-proxy-rrf75" Nov 1 00:43:21.858510 kubelet[2441]: I1101 00:43:21.858331 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5ad97c05-49d0-4a6f-ac04-bfdd658a6166-lib-modules\") pod \"kube-proxy-rrf75\" (UID: \"5ad97c05-49d0-4a6f-ac04-bfdd658a6166\") " pod="kube-system/kube-proxy-rrf75" Nov 1 00:43:21.858510 kubelet[2441]: I1101 00:43:21.858356 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5ad97c05-49d0-4a6f-ac04-bfdd658a6166-xtables-lock\") pod \"kube-proxy-rrf75\" (UID: \"5ad97c05-49d0-4a6f-ac04-bfdd658a6166\") " pod="kube-system/kube-proxy-rrf75" Nov 1 00:43:21.858510 kubelet[2441]: I1101 00:43:21.858376 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h5hwv\" (UniqueName: \"kubernetes.io/projected/5ad97c05-49d0-4a6f-ac04-bfdd658a6166-kube-api-access-h5hwv\") pod \"kube-proxy-rrf75\" (UID: \"5ad97c05-49d0-4a6f-ac04-bfdd658a6166\") " pod="kube-system/kube-proxy-rrf75" Nov 1 00:43:21.859626 systemd[1]: Created slice kubepods-besteffort-pod5ad97c05_49d0_4a6f_ac04_bfdd658a6166.slice. Nov 1 00:43:21.964665 kubelet[2441]: I1101 00:43:21.964615 2441 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:43:22.168898 env[1431]: time="2025-11-01T00:43:22.168786747Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rrf75,Uid:5ad97c05-49d0-4a6f-ac04-bfdd658a6166,Namespace:kube-system,Attempt:0,}" Nov 1 00:43:22.215245 env[1431]: time="2025-11-01T00:43:22.215176587Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:43:22.215820 env[1431]: time="2025-11-01T00:43:22.215231588Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:43:22.215820 env[1431]: time="2025-11-01T00:43:22.215769698Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:43:22.216489 env[1431]: time="2025-11-01T00:43:22.216168505Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/783ab9f4192b64490737111942c4834f725ebbfbb85dce8588bb6e9d0ed7fe55 pid=2496 runtime=io.containerd.runc.v2 Nov 1 00:43:22.250014 systemd[1]: Started cri-containerd-783ab9f4192b64490737111942c4834f725ebbfbb85dce8588bb6e9d0ed7fe55.scope. Nov 1 00:43:22.303844 kernel: kauditd_printk_skb: 9 callbacks suppressed Nov 1 00:43:22.303964 kernel: audit: type=1400 audit(1761957802.289:793): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.321905 kernel: audit: type=1400 audit(1761957802.289:794): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.335753 kernel: audit: type=1400 audit(1761957802.289:795): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.352036 kernel: audit: type=1400 audit(1761957802.289:796): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.366580 kernel: audit: type=1400 audit(1761957802.289:797): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.383007 env[1431]: time="2025-11-01T00:43:22.377269724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rrf75,Uid:5ad97c05-49d0-4a6f-ac04-bfdd658a6166,Namespace:kube-system,Attempt:0,} returns sandbox id \"783ab9f4192b64490737111942c4834f725ebbfbb85dce8588bb6e9d0ed7fe55\"" Nov 1 00:43:22.384851 env[1431]: time="2025-11-01T00:43:22.384821361Z" level=info msg="CreateContainer within sandbox \"783ab9f4192b64490737111942c4834f725ebbfbb85dce8588bb6e9d0ed7fe55\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:43:22.404959 kernel: audit: type=1400 audit(1761957802.289:798): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.405055 kernel: audit: type=1400 audit(1761957802.289:799): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.423716 kernel: audit: type=1400 audit(1761957802.289:800): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.423802 env[1431]: time="2025-11-01T00:43:22.422474843Z" level=info msg="CreateContainer within sandbox \"783ab9f4192b64490737111942c4834f725ebbfbb85dce8588bb6e9d0ed7fe55\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"f52cae724fd7f7f09c6dff5f13e650c33be7297aec13ffa31f0528c728e03a2f\"" Nov 1 00:43:22.423802 env[1431]: time="2025-11-01T00:43:22.423301258Z" level=info msg="StartContainer for \"f52cae724fd7f7f09c6dff5f13e650c33be7297aec13ffa31f0528c728e03a2f\"" Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.438240 kernel: audit: type=1400 audit(1761957802.289:801): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.438332 kernel: audit: type=1400 audit(1761957802.289:802): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.453955 systemd[1]: Started cri-containerd-f52cae724fd7f7f09c6dff5f13e650c33be7297aec13ffa31f0528c728e03a2f.scope. Nov 1 00:43:22.289000 audit: BPF prog-id=104 op=LOAD Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2496 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738336162396634313932623634343930373337313131393432633438 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2496 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738336162396634313932623634343930373337313131393432633438 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.300000 audit: BPF prog-id=105 op=LOAD Nov 1 00:43:22.300000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a7040 items=0 ppid=2496 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738336162396634313932623634343930373337313131393432633438 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.308000 audit: BPF prog-id=106 op=LOAD Nov 1 00:43:22.308000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a7088 items=0 ppid=2496 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738336162396634313932623634343930373337313131393432633438 Nov 1 00:43:22.334000 audit: BPF prog-id=106 op=UNLOAD Nov 1 00:43:22.334000 audit: BPF prog-id=105 op=UNLOAD Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.334000 audit: BPF prog-id=107 op=LOAD Nov 1 00:43:22.334000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a7498 items=0 ppid=2496 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738336162396634313932623634343930373337313131393432633438 Nov 1 00:43:22.476579 systemd[1]: Created slice kubepods-besteffort-podd5aa98e3_ad62_4aa6_a5fb_2c7b055fe13e.slice. Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f7e23f29b48 items=0 ppid=2496 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635326361653732346664376637663039633664666635663133653635 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit: BPF prog-id=108 op=LOAD Nov 1 00:43:22.482000 audit[2540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a2888 items=0 ppid=2496 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635326361653732346664376637663039633664666635663133653635 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit: BPF prog-id=109 op=LOAD Nov 1 00:43:22.482000 audit[2540]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000a28d8 items=0 ppid=2496 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635326361653732346664376637663039633664666635663133653635 Nov 1 00:43:22.482000 audit: BPF prog-id=109 op=UNLOAD Nov 1 00:43:22.482000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.482000 audit: BPF prog-id=110 op=LOAD Nov 1 00:43:22.482000 audit[2540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000a2968 items=0 ppid=2496 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635326361653732346664376637663039633664666635663133653635 Nov 1 00:43:22.505056 env[1431]: time="2025-11-01T00:43:22.505002338Z" level=info msg="StartContainer for \"f52cae724fd7f7f09c6dff5f13e650c33be7297aec13ffa31f0528c728e03a2f\" returns successfully" Nov 1 00:43:22.564575 kubelet[2441]: I1101 00:43:22.564458 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d5aa98e3-ad62-4aa6-a5fb-2c7b055fe13e-var-lib-calico\") pod \"tigera-operator-7dcd859c48-wb5nl\" (UID: \"d5aa98e3-ad62-4aa6-a5fb-2c7b055fe13e\") " pod="tigera-operator/tigera-operator-7dcd859c48-wb5nl" Nov 1 00:43:22.564575 kubelet[2441]: I1101 00:43:22.564516 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t9p9r\" (UniqueName: \"kubernetes.io/projected/d5aa98e3-ad62-4aa6-a5fb-2c7b055fe13e-kube-api-access-t9p9r\") pod \"tigera-operator-7dcd859c48-wb5nl\" (UID: \"d5aa98e3-ad62-4aa6-a5fb-2c7b055fe13e\") " pod="tigera-operator/tigera-operator-7dcd859c48-wb5nl" Nov 1 00:43:22.631000 audit[2602]: NETFILTER_CFG table=mangle:43 family=2 entries=1 op=nft_register_chain pid=2602 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.631000 audit[2602]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcfef753c0 a2=0 a3=7ffcfef753ac items=0 ppid=2550 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.631000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:43:22.633000 audit[2603]: NETFILTER_CFG table=mangle:44 family=10 entries=1 op=nft_register_chain pid=2603 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.633000 audit[2603]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdff8e7b60 a2=0 a3=7ffdff8e7b4c items=0 ppid=2550 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.633000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:43:22.636000 audit[2605]: NETFILTER_CFG table=nat:45 family=2 entries=1 op=nft_register_chain pid=2605 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.636000 audit[2605]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2dbea770 a2=0 a3=7fff2dbea75c items=0 ppid=2550 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.636000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:43:22.638000 audit[2606]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_chain pid=2606 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.638000 audit[2606]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcb0550760 a2=0 a3=7ffcb055074c items=0 ppid=2550 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.638000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:43:22.640000 audit[2608]: NETFILTER_CFG table=filter:47 family=10 entries=1 op=nft_register_chain pid=2608 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.640000 audit[2608]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffdf15b6b0 a2=0 a3=7fffdf15b69c items=0 ppid=2550 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.640000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:43:22.641000 audit[2607]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2607 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.641000 audit[2607]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7bde25d0 a2=0 a3=6029a822ac94deab items=0 ppid=2550 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.641000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:43:22.725000 audit[2610]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2610 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.725000 audit[2610]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe8d82a8d0 a2=0 a3=7ffe8d82a8bc items=0 ppid=2550 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.725000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:43:22.729000 audit[2612]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2612 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.729000 audit[2612]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc72f778b0 a2=0 a3=7ffc72f7789c items=0 ppid=2550 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.729000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:43:22.733000 audit[2615]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.733000 audit[2615]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffeb5b57ad0 a2=0 a3=7ffeb5b57abc items=0 ppid=2550 pid=2615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.733000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:43:22.734000 audit[2616]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.734000 audit[2616]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd6d819240 a2=0 a3=7ffd6d81922c items=0 ppid=2550 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.734000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:43:22.736000 audit[2618]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.736000 audit[2618]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff873a4b10 a2=0 a3=7fff873a4afc items=0 ppid=2550 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.736000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:43:22.738000 audit[2619]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.738000 audit[2619]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc760b9290 a2=0 a3=7ffc760b927c items=0 ppid=2550 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:43:22.740000 audit[2621]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.740000 audit[2621]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdd509e770 a2=0 a3=7ffdd509e75c items=0 ppid=2550 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.740000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:43:22.744000 audit[2624]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.744000 audit[2624]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd7a68ac20 a2=0 a3=7ffd7a68ac0c items=0 ppid=2550 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.744000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:43:22.745000 audit[2625]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.745000 audit[2625]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde7a1f540 a2=0 a3=7ffde7a1f52c items=0 ppid=2550 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.745000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:43:22.748000 audit[2627]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.748000 audit[2627]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdea594de0 a2=0 a3=7ffdea594dcc items=0 ppid=2550 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.748000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:43:22.749000 audit[2628]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_chain pid=2628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.749000 audit[2628]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffda5a40070 a2=0 a3=7ffda5a4005c items=0 ppid=2550 pid=2628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.749000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:43:22.751000 audit[2630]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.751000 audit[2630]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffce10454d0 a2=0 a3=7ffce10454bc items=0 ppid=2550 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.751000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:43:22.755000 audit[2633]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.755000 audit[2633]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc07379990 a2=0 a3=7ffc0737997c items=0 ppid=2550 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.755000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:43:22.759000 audit[2636]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_rule pid=2636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.759000 audit[2636]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd0707c160 a2=0 a3=7ffd0707c14c items=0 ppid=2550 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.759000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:43:22.760000 audit[2637]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_chain pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.760000 audit[2637]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0a8c98c0 a2=0 a3=7fff0a8c98ac items=0 ppid=2550 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:43:22.763000 audit[2639]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.763000 audit[2639]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe311ddad0 a2=0 a3=7ffe311ddabc items=0 ppid=2550 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:43:22.767000 audit[2642]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.767000 audit[2642]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdd2fdbe20 a2=0 a3=7ffdd2fdbe0c items=0 ppid=2550 pid=2642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:43:22.768000 audit[2643]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_chain pid=2643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.768000 audit[2643]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc82042f50 a2=0 a3=7ffc82042f3c items=0 ppid=2550 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.768000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:43:22.772000 audit[2645]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_rule pid=2645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:43:22.772000 audit[2645]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffccfa23030 a2=0 a3=7ffccfa2301c items=0 ppid=2550 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.772000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:43:22.781299 env[1431]: time="2025-11-01T00:43:22.781251443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-wb5nl,Uid:d5aa98e3-ad62-4aa6-a5fb-2c7b055fe13e,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:43:22.813338 env[1431]: time="2025-11-01T00:43:22.813271723Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:43:22.813481 env[1431]: time="2025-11-01T00:43:22.813312724Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:43:22.813481 env[1431]: time="2025-11-01T00:43:22.813468127Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:43:22.813799 env[1431]: time="2025-11-01T00:43:22.813758332Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/124f8e4731167de1038a5be2ef80c4dd7d278ef88fd9ba1373d9861b2cbd618e pid=2661 runtime=io.containerd.runc.v2 Nov 1 00:43:22.826383 systemd[1]: Started cri-containerd-124f8e4731167de1038a5be2ef80c4dd7d278ef88fd9ba1373d9861b2cbd618e.scope. Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit: BPF prog-id=111 op=LOAD Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2661 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132346638653437333131363764653130333861356265326566383063 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2661 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132346638653437333131363764653130333861356265326566383063 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit: BPF prog-id=112 op=LOAD Nov 1 00:43:22.840000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001ccd70 items=0 ppid=2661 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132346638653437333131363764653130333861356265326566383063 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.840000 audit: BPF prog-id=113 op=LOAD Nov 1 00:43:22.840000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001ccdb8 items=0 ppid=2661 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132346638653437333131363764653130333861356265326566383063 Nov 1 00:43:22.841000 audit: BPF prog-id=113 op=UNLOAD Nov 1 00:43:22.841000 audit: BPF prog-id=112 op=UNLOAD Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { perfmon } for pid=2670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit[2670]: AVC avc: denied { bpf } for pid=2670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:22.841000 audit: BPF prog-id=114 op=LOAD Nov 1 00:43:22.841000 audit[2670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001cd1c8 items=0 ppid=2661 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132346638653437333131363764653130333861356265326566383063 Nov 1 00:43:22.872218 env[1431]: time="2025-11-01T00:43:22.872176591Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-wb5nl,Uid:d5aa98e3-ad62-4aa6-a5fb-2c7b055fe13e,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"124f8e4731167de1038a5be2ef80c4dd7d278ef88fd9ba1373d9861b2cbd618e\"" Nov 1 00:43:22.875947 env[1431]: time="2025-11-01T00:43:22.875257746Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:43:22.885000 audit[2651]: NETFILTER_CFG table=filter:68 family=2 entries=8 op=nft_register_rule pid=2651 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:22.885000 audit[2651]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe91f4d350 a2=0 a3=7ffe91f4d33c items=0 ppid=2550 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.885000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:22.922000 audit[2651]: NETFILTER_CFG table=nat:69 family=2 entries=14 op=nft_register_chain pid=2651 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:22.922000 audit[2651]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe91f4d350 a2=0 a3=7ffe91f4d33c items=0 ppid=2550 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.922000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:22.924000 audit[2699]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.924000 audit[2699]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc2ac5ff90 a2=0 a3=7ffc2ac5ff7c items=0 ppid=2550 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.924000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:43:22.927000 audit[2701]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2701 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.927000 audit[2701]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc9fa10880 a2=0 a3=7ffc9fa1086c items=0 ppid=2550 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.927000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:43:22.931000 audit[2704]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2704 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.931000 audit[2704]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffeb1497950 a2=0 a3=7ffeb149793c items=0 ppid=2550 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.931000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:43:22.933000 audit[2705]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2705 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.933000 audit[2705]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc19969790 a2=0 a3=7ffc1996977c items=0 ppid=2550 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.933000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:43:22.935000 audit[2707]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2707 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.935000 audit[2707]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdb710d450 a2=0 a3=7ffdb710d43c items=0 ppid=2550 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:43:22.936000 audit[2708]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2708 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.936000 audit[2708]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeab5187a0 a2=0 a3=7ffeab51878c items=0 ppid=2550 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.936000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:43:22.939000 audit[2710]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2710 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.939000 audit[2710]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe8e60d130 a2=0 a3=7ffe8e60d11c items=0 ppid=2550 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.939000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:43:22.942000 audit[2713]: NETFILTER_CFG table=filter:77 family=10 entries=2 op=nft_register_chain pid=2713 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.942000 audit[2713]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe38679db0 a2=0 a3=7ffe38679d9c items=0 ppid=2550 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.942000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:43:22.943000 audit[2714]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2714 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.943000 audit[2714]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7df285a0 a2=0 a3=7ffc7df2858c items=0 ppid=2550 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.943000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:43:22.946000 audit[2716]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2716 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.946000 audit[2716]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc93536250 a2=0 a3=7ffc9353623c items=0 ppid=2550 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.946000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:43:22.947000 audit[2717]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_chain pid=2717 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.947000 audit[2717]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd4c7a64b0 a2=0 a3=7ffd4c7a649c items=0 ppid=2550 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.947000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:43:22.949000 audit[2719]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2719 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.949000 audit[2719]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe12fc1870 a2=0 a3=7ffe12fc185c items=0 ppid=2550 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.949000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:43:22.953000 audit[2722]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2722 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.953000 audit[2722]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff7a0ce0d0 a2=0 a3=7fff7a0ce0bc items=0 ppid=2550 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.953000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:43:22.957000 audit[2725]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.957000 audit[2725]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc1ce7ec10 a2=0 a3=7ffc1ce7ebfc items=0 ppid=2550 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.957000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:43:22.958000 audit[2726]: NETFILTER_CFG table=nat:84 family=10 entries=1 op=nft_register_chain pid=2726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.958000 audit[2726]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd85bcd8a0 a2=0 a3=7ffd85bcd88c items=0 ppid=2550 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.958000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:43:22.960000 audit[2728]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2728 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.960000 audit[2728]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffeb0989b50 a2=0 a3=7ffeb0989b3c items=0 ppid=2550 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.960000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:43:22.964000 audit[2731]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2731 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.964000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffcb41d0750 a2=0 a3=7ffcb41d073c items=0 ppid=2550 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.964000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:43:22.965000 audit[2732]: NETFILTER_CFG table=nat:87 family=10 entries=1 op=nft_register_chain pid=2732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.965000 audit[2732]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0177b870 a2=0 a3=7fff0177b85c items=0 ppid=2550 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.965000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:43:22.968000 audit[2734]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.968000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc300f25f0 a2=0 a3=7ffc300f25dc items=0 ppid=2550 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.968000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:43:22.970000 audit[2735]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.970000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcacb5c7d0 a2=0 a3=7ffcacb5c7bc items=0 ppid=2550 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.970000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:43:22.973000 audit[2737]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.973000 audit[2737]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd9ff0a9c0 a2=0 a3=7ffd9ff0a9ac items=0 ppid=2550 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.973000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:43:22.980000 audit[2740]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_rule pid=2740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:43:22.982884 systemd[1]: run-containerd-runc-k8s.io-783ab9f4192b64490737111942c4834f725ebbfbb85dce8588bb6e9d0ed7fe55-runc.0xO0FC.mount: Deactivated successfully. Nov 1 00:43:22.980000 audit[2740]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffa63d9220 a2=0 a3=7fffa63d920c items=0 ppid=2550 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.980000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:43:22.991000 audit[2742]: NETFILTER_CFG table=filter:92 family=10 entries=3 op=nft_register_rule pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:43:22.991000 audit[2742]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fffd26b2750 a2=0 a3=7fffd26b273c items=0 ppid=2550 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.991000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:22.991000 audit[2742]: NETFILTER_CFG table=nat:93 family=10 entries=7 op=nft_register_chain pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:43:22.991000 audit[2742]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fffd26b2750 a2=0 a3=7fffd26b273c items=0 ppid=2550 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:22.991000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:24.006742 kubelet[2441]: I1101 00:43:24.006682 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-rrf75" podStartSLOduration=3.006661427 podStartE2EDuration="3.006661427s" podCreationTimestamp="2025-11-01 00:43:21 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:43:23.299317206 +0000 UTC m=+8.003344574" watchObservedRunningTime="2025-11-01 00:43:24.006661427 +0000 UTC m=+8.710688895" Nov 1 00:43:24.393500 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2334152304.mount: Deactivated successfully. Nov 1 00:43:25.316030 env[1431]: time="2025-11-01T00:43:25.315988260Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:25.322250 env[1431]: time="2025-11-01T00:43:25.322213565Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:25.326273 env[1431]: time="2025-11-01T00:43:25.326244233Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:25.330777 env[1431]: time="2025-11-01T00:43:25.330747109Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:25.331273 env[1431]: time="2025-11-01T00:43:25.331242218Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\"" Nov 1 00:43:25.337809 env[1431]: time="2025-11-01T00:43:25.337774228Z" level=info msg="CreateContainer within sandbox \"124f8e4731167de1038a5be2ef80c4dd7d278ef88fd9ba1373d9861b2cbd618e\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:43:25.365469 env[1431]: time="2025-11-01T00:43:25.365427996Z" level=info msg="CreateContainer within sandbox \"124f8e4731167de1038a5be2ef80c4dd7d278ef88fd9ba1373d9861b2cbd618e\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"815a628d7921d606c3827943c1a6d1617eb7773d4eb3e7659c5b66d93f8067be\"" Nov 1 00:43:25.367344 env[1431]: time="2025-11-01T00:43:25.366017606Z" level=info msg="StartContainer for \"815a628d7921d606c3827943c1a6d1617eb7773d4eb3e7659c5b66d93f8067be\"" Nov 1 00:43:25.392178 systemd[1]: run-containerd-runc-k8s.io-815a628d7921d606c3827943c1a6d1617eb7773d4eb3e7659c5b66d93f8067be-runc.3Vwmae.mount: Deactivated successfully. Nov 1 00:43:25.395798 systemd[1]: Started cri-containerd-815a628d7921d606c3827943c1a6d1617eb7773d4eb3e7659c5b66d93f8067be.scope. Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit: BPF prog-id=115 op=LOAD Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2661 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:25.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831356136323864373932316436303663333832373934336331613664 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2661 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:25.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831356136323864373932316436303663333832373934336331613664 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit: BPF prog-id=116 op=LOAD Nov 1 00:43:25.405000 audit[2750]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003b24a0 items=0 ppid=2661 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:25.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831356136323864373932316436303663333832373934336331613664 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.405000 audit: BPF prog-id=117 op=LOAD Nov 1 00:43:25.405000 audit[2750]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003b24e8 items=0 ppid=2661 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:25.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831356136323864373932316436303663333832373934336331613664 Nov 1 00:43:25.406000 audit: BPF prog-id=117 op=UNLOAD Nov 1 00:43:25.406000 audit: BPF prog-id=116 op=UNLOAD Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { perfmon } for pid=2750 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit[2750]: AVC avc: denied { bpf } for pid=2750 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:25.406000 audit: BPF prog-id=118 op=LOAD Nov 1 00:43:25.406000 audit[2750]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003b28f8 items=0 ppid=2661 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:25.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831356136323864373932316436303663333832373934336331613664 Nov 1 00:43:25.424915 env[1431]: time="2025-11-01T00:43:25.424868301Z" level=info msg="StartContainer for \"815a628d7921d606c3827943c1a6d1617eb7773d4eb3e7659c5b66d93f8067be\" returns successfully" Nov 1 00:43:31.568000 audit[1765]: USER_END pid=1765 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:43:31.569828 sudo[1765]: pam_unix(sudo:session): session closed for user root Nov 1 00:43:31.574956 kernel: kauditd_printk_skb: 357 callbacks suppressed Nov 1 00:43:31.574992 kernel: audit: type=1106 audit(1761957811.568:904): pid=1765 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:43:31.573000 audit[1765]: CRED_DISP pid=1765 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:43:31.611572 kernel: audit: type=1104 audit(1761957811.573:905): pid=1765 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:43:31.671807 sshd[1762]: pam_unix(sshd:session): session closed for user core Nov 1 00:43:31.672000 audit[1762]: USER_END pid=1762 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:43:31.698590 kernel: audit: type=1106 audit(1761957811.672:906): pid=1762 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:43:31.698773 systemd[1]: sshd@6-10.200.4.5:22-10.200.16.10:52878.service: Deactivated successfully. Nov 1 00:43:31.700331 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:43:31.700503 systemd[1]: session-9.scope: Consumed 5.569s CPU time. Nov 1 00:43:31.701249 systemd-logind[1417]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:43:31.702200 systemd-logind[1417]: Removed session 9. Nov 1 00:43:31.672000 audit[1762]: CRED_DISP pid=1762 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:43:31.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.4.5:22-10.200.16.10:52878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:31.738768 kernel: audit: type=1104 audit(1761957811.672:907): pid=1762 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:43:31.738839 kernel: audit: type=1131 audit(1761957811.697:908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.4.5:22-10.200.16.10:52878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:43:32.396000 audit[2825]: NETFILTER_CFG table=filter:94 family=2 entries=15 op=nft_register_rule pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:32.411579 kernel: audit: type=1325 audit(1761957812.396:909): table=filter:94 family=2 entries=15 op=nft_register_rule pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:32.396000 audit[2825]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc5a1100f0 a2=0 a3=7ffc5a1100dc items=0 ppid=2550 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:32.434572 kernel: audit: type=1300 audit(1761957812.396:909): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc5a1100f0 a2=0 a3=7ffc5a1100dc items=0 ppid=2550 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:32.434669 kernel: audit: type=1327 audit(1761957812.396:909): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:32.396000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:32.444000 audit[2825]: NETFILTER_CFG table=nat:95 family=2 entries=12 op=nft_register_rule pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:32.457650 kernel: audit: type=1325 audit(1761957812.444:910): table=nat:95 family=2 entries=12 op=nft_register_rule pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:32.444000 audit[2825]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc5a1100f0 a2=0 a3=0 items=0 ppid=2550 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:32.483572 kernel: audit: type=1300 audit(1761957812.444:910): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc5a1100f0 a2=0 a3=0 items=0 ppid=2550 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:32.444000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:32.531000 audit[2827]: NETFILTER_CFG table=filter:96 family=2 entries=16 op=nft_register_rule pid=2827 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:32.531000 audit[2827]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffca8db91f0 a2=0 a3=7ffca8db91dc items=0 ppid=2550 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:32.531000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:32.536000 audit[2827]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2827 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:32.536000 audit[2827]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffca8db91f0 a2=0 a3=0 items=0 ppid=2550 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:32.536000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:35.816000 audit[2830]: NETFILTER_CFG table=filter:98 family=2 entries=17 op=nft_register_rule pid=2830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:35.816000 audit[2830]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff6eae3d30 a2=0 a3=7fff6eae3d1c items=0 ppid=2550 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:35.816000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:35.821000 audit[2830]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:35.821000 audit[2830]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff6eae3d30 a2=0 a3=0 items=0 ppid=2550 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:35.821000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:35.834000 audit[2832]: NETFILTER_CFG table=filter:100 family=2 entries=18 op=nft_register_rule pid=2832 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:35.834000 audit[2832]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff5158e5b0 a2=0 a3=7fff5158e59c items=0 ppid=2550 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:35.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:35.843000 audit[2832]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2832 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:35.843000 audit[2832]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff5158e5b0 a2=0 a3=0 items=0 ppid=2550 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:35.843000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:36.854000 audit[2835]: NETFILTER_CFG table=filter:102 family=2 entries=19 op=nft_register_rule pid=2835 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:36.861468 kernel: kauditd_printk_skb: 19 callbacks suppressed Nov 1 00:43:36.861563 kernel: audit: type=1325 audit(1761957816.854:917): table=filter:102 family=2 entries=19 op=nft_register_rule pid=2835 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:36.854000 audit[2835]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc004379e0 a2=0 a3=7ffc004379cc items=0 ppid=2550 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:36.895572 kernel: audit: type=1300 audit(1761957816.854:917): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc004379e0 a2=0 a3=7ffc004379cc items=0 ppid=2550 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:36.854000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:36.911599 kernel: audit: type=1327 audit(1761957816.854:917): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:36.897000 audit[2835]: NETFILTER_CFG table=nat:103 family=2 entries=12 op=nft_register_rule pid=2835 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:36.897000 audit[2835]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc004379e0 a2=0 a3=0 items=0 ppid=2550 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:36.940923 kernel: audit: type=1325 audit(1761957816.897:918): table=nat:103 family=2 entries=12 op=nft_register_rule pid=2835 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:36.941000 kernel: audit: type=1300 audit(1761957816.897:918): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc004379e0 a2=0 a3=0 items=0 ppid=2550 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:36.941031 kernel: audit: type=1327 audit(1761957816.897:918): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:36.897000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:37.439238 kubelet[2441]: I1101 00:43:37.439163 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-wb5nl" podStartSLOduration=12.981218322 podStartE2EDuration="15.439102027s" podCreationTimestamp="2025-11-01 00:43:22 +0000 UTC" firstStartedPulling="2025-11-01 00:43:22.874266228 +0000 UTC m=+7.578293596" lastFinishedPulling="2025-11-01 00:43:25.332149933 +0000 UTC m=+10.036177301" observedRunningTime="2025-11-01 00:43:26.310921872 +0000 UTC m=+11.014949340" watchObservedRunningTime="2025-11-01 00:43:37.439102027 +0000 UTC m=+22.143129395" Nov 1 00:43:37.452261 systemd[1]: Created slice kubepods-besteffort-pod486d2a93_c0b5_4890_ba41_f6912c06aac8.slice. Nov 1 00:43:37.577072 kubelet[2441]: I1101 00:43:37.577016 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/486d2a93-c0b5-4890-ba41-f6912c06aac8-typha-certs\") pod \"calico-typha-6bbcbdfd9c-dq588\" (UID: \"486d2a93-c0b5-4890-ba41-f6912c06aac8\") " pod="calico-system/calico-typha-6bbcbdfd9c-dq588" Nov 1 00:43:37.577072 kubelet[2441]: I1101 00:43:37.577069 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gwpcl\" (UniqueName: \"kubernetes.io/projected/486d2a93-c0b5-4890-ba41-f6912c06aac8-kube-api-access-gwpcl\") pod \"calico-typha-6bbcbdfd9c-dq588\" (UID: \"486d2a93-c0b5-4890-ba41-f6912c06aac8\") " pod="calico-system/calico-typha-6bbcbdfd9c-dq588" Nov 1 00:43:37.577290 kubelet[2441]: I1101 00:43:37.577099 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/486d2a93-c0b5-4890-ba41-f6912c06aac8-tigera-ca-bundle\") pod \"calico-typha-6bbcbdfd9c-dq588\" (UID: \"486d2a93-c0b5-4890-ba41-f6912c06aac8\") " pod="calico-system/calico-typha-6bbcbdfd9c-dq588" Nov 1 00:43:37.632175 systemd[1]: Created slice kubepods-besteffort-podd0f84dbb_62cd_4d34_be12_03078086f11c.slice. Nov 1 00:43:37.756282 env[1431]: time="2025-11-01T00:43:37.755871876Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6bbcbdfd9c-dq588,Uid:486d2a93-c0b5-4890-ba41-f6912c06aac8,Namespace:calico-system,Attempt:0,}" Nov 1 00:43:37.779118 kubelet[2441]: I1101 00:43:37.779081 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-flexvol-driver-host\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779118 kubelet[2441]: I1101 00:43:37.779125 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-policysync\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779333 kubelet[2441]: I1101 00:43:37.779150 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-var-run-calico\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779333 kubelet[2441]: I1101 00:43:37.779175 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/d0f84dbb-62cd-4d34-be12-03078086f11c-node-certs\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779333 kubelet[2441]: I1101 00:43:37.779194 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d0f84dbb-62cd-4d34-be12-03078086f11c-tigera-ca-bundle\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779333 kubelet[2441]: I1101 00:43:37.779215 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-var-lib-calico\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779333 kubelet[2441]: I1101 00:43:37.779237 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-cni-net-dir\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779517 kubelet[2441]: I1101 00:43:37.779275 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-cni-bin-dir\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779517 kubelet[2441]: I1101 00:43:37.779297 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-cni-log-dir\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779517 kubelet[2441]: I1101 00:43:37.779322 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-lib-modules\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779517 kubelet[2441]: I1101 00:43:37.779344 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d0f84dbb-62cd-4d34-be12-03078086f11c-xtables-lock\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.779517 kubelet[2441]: I1101 00:43:37.779368 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gq7xp\" (UniqueName: \"kubernetes.io/projected/d0f84dbb-62cd-4d34-be12-03078086f11c-kube-api-access-gq7xp\") pod \"calico-node-g8pht\" (UID: \"d0f84dbb-62cd-4d34-be12-03078086f11c\") " pod="calico-system/calico-node-g8pht" Nov 1 00:43:37.793819 env[1431]: time="2025-11-01T00:43:37.793750972Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:43:37.793819 env[1431]: time="2025-11-01T00:43:37.793787973Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:43:37.794061 env[1431]: time="2025-11-01T00:43:37.793802273Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:43:37.794061 env[1431]: time="2025-11-01T00:43:37.793939975Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9edea0651274b1711f2d7725daf6ce91dfd9b8e4f71b1e513322b66acd87f771 pid=2847 runtime=io.containerd.runc.v2 Nov 1 00:43:37.829822 systemd[1]: Started cri-containerd-9edea0651274b1711f2d7725daf6ce91dfd9b8e4f71b1e513322b66acd87f771.scope. Nov 1 00:43:37.848596 kubelet[2441]: E1101 00:43:37.848439 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873634 kernel: audit: type=1400 audit(1761957817.857:919): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.888573 kernel: audit: type=1400 audit(1761957817.857:920): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.889983 kubelet[2441]: E1101 00:43:37.889956 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.889983 kubelet[2441]: W1101 00:43:37.889983 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.890167 kubelet[2441]: E1101 00:43:37.890100 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.892666 kubelet[2441]: E1101 00:43:37.892643 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.892666 kubelet[2441]: W1101 00:43:37.892665 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.892835 kubelet[2441]: E1101 00:43:37.892682 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.894517 kubelet[2441]: E1101 00:43:37.894496 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.894517 kubelet[2441]: W1101 00:43:37.894514 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.894685 kubelet[2441]: E1101 00:43:37.894534 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.894986 kubelet[2441]: E1101 00:43:37.894965 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.894986 kubelet[2441]: W1101 00:43:37.894983 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.895139 kubelet[2441]: E1101 00:43:37.895005 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.895248 kubelet[2441]: E1101 00:43:37.895227 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.895322 kubelet[2441]: W1101 00:43:37.895253 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.895322 kubelet[2441]: E1101 00:43:37.895268 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.895496 kubelet[2441]: E1101 00:43:37.895476 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.895496 kubelet[2441]: W1101 00:43:37.895494 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.895624 kubelet[2441]: E1101 00:43:37.895506 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.895880 kubelet[2441]: E1101 00:43:37.895861 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.895880 kubelet[2441]: W1101 00:43:37.895880 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.895997 kubelet[2441]: E1101 00:43:37.895893 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.896130 kubelet[2441]: E1101 00:43:37.896115 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.896194 kubelet[2441]: W1101 00:43:37.896131 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.896194 kubelet[2441]: E1101 00:43:37.896143 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.896409 kubelet[2441]: E1101 00:43:37.896391 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.896409 kubelet[2441]: W1101 00:43:37.896409 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.896576 kubelet[2441]: E1101 00:43:37.896422 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.909569 kernel: audit: type=1400 audit(1761957817.857:921): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.909643 kubelet[2441]: E1101 00:43:37.909592 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.909643 kubelet[2441]: W1101 00:43:37.909605 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.909643 kubelet[2441]: E1101 00:43:37.909620 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.912120 kubelet[2441]: E1101 00:43:37.912100 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.912120 kubelet[2441]: W1101 00:43:37.912118 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.912243 kubelet[2441]: E1101 00:43:37.912132 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.913987 kubelet[2441]: E1101 00:43:37.913967 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.913987 kubelet[2441]: W1101 00:43:37.913986 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.914169 kubelet[2441]: E1101 00:43:37.914015 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.914355 kubelet[2441]: E1101 00:43:37.914333 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.914355 kubelet[2441]: W1101 00:43:37.914351 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.914477 kubelet[2441]: E1101 00:43:37.914367 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.914669 kubelet[2441]: E1101 00:43:37.914652 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.914669 kubelet[2441]: W1101 00:43:37.914669 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.914800 kubelet[2441]: E1101 00:43:37.914682 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.914950 kubelet[2441]: E1101 00:43:37.914925 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.914950 kubelet[2441]: W1101 00:43:37.914942 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.915051 kubelet[2441]: E1101 00:43:37.914971 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.915234 kubelet[2441]: E1101 00:43:37.915216 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.915234 kubelet[2441]: W1101 00:43:37.915233 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.915361 kubelet[2441]: E1101 00:43:37.915247 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.915928 kubelet[2441]: E1101 00:43:37.915906 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.915928 kubelet[2441]: W1101 00:43:37.915928 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.916058 kubelet[2441]: E1101 00:43:37.915943 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.916267 kubelet[2441]: E1101 00:43:37.916240 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.916267 kubelet[2441]: W1101 00:43:37.916265 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.916401 kubelet[2441]: E1101 00:43:37.916278 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.916592 kubelet[2441]: E1101 00:43:37.916568 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.916659 kubelet[2441]: W1101 00:43:37.916592 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.916659 kubelet[2441]: E1101 00:43:37.916605 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.916890 kubelet[2441]: E1101 00:43:37.916868 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.916890 kubelet[2441]: W1101 00:43:37.916890 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.917033 kubelet[2441]: E1101 00:43:37.916903 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.917534 kubelet[2441]: E1101 00:43:37.917514 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.917628 kubelet[2441]: W1101 00:43:37.917533 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.917628 kubelet[2441]: E1101 00:43:37.917569 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.917848 kubelet[2441]: E1101 00:43:37.917820 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.917924 kubelet[2441]: W1101 00:43:37.917855 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.917924 kubelet[2441]: E1101 00:43:37.917871 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.918117 kubelet[2441]: E1101 00:43:37.918072 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.918117 kubelet[2441]: W1101 00:43:37.918090 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.918117 kubelet[2441]: E1101 00:43:37.918102 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.918315 kubelet[2441]: E1101 00:43:37.918303 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.918386 kubelet[2441]: W1101 00:43:37.918317 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.918386 kubelet[2441]: E1101 00:43:37.918328 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.919653 kubelet[2441]: E1101 00:43:37.919634 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.919653 kubelet[2441]: W1101 00:43:37.919651 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.919816 kubelet[2441]: E1101 00:43:37.919665 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.919869 kubelet[2441]: E1101 00:43:37.919851 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.919869 kubelet[2441]: W1101 00:43:37.919861 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.919968 kubelet[2441]: E1101 00:43:37.919874 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.920094 kubelet[2441]: E1101 00:43:37.920061 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.920094 kubelet[2441]: W1101 00:43:37.920079 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.920094 kubelet[2441]: E1101 00:43:37.920091 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.920286 kubelet[2441]: E1101 00:43:37.920270 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.920354 kubelet[2441]: W1101 00:43:37.920287 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.920354 kubelet[2441]: E1101 00:43:37.920298 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.920510 kubelet[2441]: E1101 00:43:37.920477 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.920510 kubelet[2441]: W1101 00:43:37.920492 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.920510 kubelet[2441]: E1101 00:43:37.920504 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.937641 kernel: audit: type=1400 audit(1761957817.857:922): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.944584 kubelet[2441]: E1101 00:43:37.944567 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.944712 kubelet[2441]: W1101 00:43:37.944696 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.944802 kubelet[2441]: E1101 00:43:37.944789 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.871000 audit: BPF prog-id=119 op=LOAD Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2847 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:37.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965646561303635313237346231373131663264373732356461663663 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=2847 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:37.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965646561303635313237346231373131663264373732356461663663 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.872000 audit: BPF prog-id=120 op=LOAD Nov 1 00:43:37.872000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00035c1a0 items=0 ppid=2847 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:37.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965646561303635313237346231373131663264373732356461663663 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit: BPF prog-id=121 op=LOAD Nov 1 00:43:37.873000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00035c1e8 items=0 ppid=2847 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:37.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965646561303635313237346231373131663264373732356461663663 Nov 1 00:43:37.873000 audit: BPF prog-id=121 op=UNLOAD Nov 1 00:43:37.873000 audit: BPF prog-id=120 op=UNLOAD Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { perfmon } for pid=2857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit[2857]: AVC avc: denied { bpf } for pid=2857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:37.873000 audit: BPF prog-id=122 op=LOAD Nov 1 00:43:37.873000 audit[2857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00035c5f8 items=0 ppid=2847 pid=2857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:37.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965646561303635313237346231373131663264373732356461663663 Nov 1 00:43:37.945000 audit[2905]: NETFILTER_CFG table=filter:104 family=2 entries=21 op=nft_register_rule pid=2905 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:37.945000 audit[2905]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdbaf03460 a2=0 a3=7ffdbaf0344c items=0 ppid=2550 pid=2905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:37.945000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:37.950909 env[1431]: time="2025-11-01T00:43:37.950862130Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-g8pht,Uid:d0f84dbb-62cd-4d34-be12-03078086f11c,Namespace:calico-system,Attempt:0,}" Nov 1 00:43:37.950000 audit[2905]: NETFILTER_CFG table=nat:105 family=2 entries=12 op=nft_register_rule pid=2905 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:37.950000 audit[2905]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdbaf03460 a2=0 a3=0 items=0 ppid=2550 pid=2905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:37.950000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:37.975078 env[1431]: time="2025-11-01T00:43:37.975031347Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6bbcbdfd9c-dq588,Uid:486d2a93-c0b5-4890-ba41-f6912c06aac8,Namespace:calico-system,Attempt:0,} returns sandbox id \"9edea0651274b1711f2d7725daf6ce91dfd9b8e4f71b1e513322b66acd87f771\"" Nov 1 00:43:37.977229 env[1431]: time="2025-11-01T00:43:37.977193875Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:43:37.985935 kubelet[2441]: E1101 00:43:37.985899 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.985935 kubelet[2441]: W1101 00:43:37.985925 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.986130 kubelet[2441]: E1101 00:43:37.985949 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.986130 kubelet[2441]: I1101 00:43:37.985983 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/ce526820-d1dc-4357-9fb7-1cb0ce632942-kubelet-dir\") pod \"csi-node-driver-9ksnm\" (UID: \"ce526820-d1dc-4357-9fb7-1cb0ce632942\") " pod="calico-system/csi-node-driver-9ksnm" Nov 1 00:43:37.986242 kubelet[2441]: E1101 00:43:37.986200 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.986242 kubelet[2441]: W1101 00:43:37.986213 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.986242 kubelet[2441]: E1101 00:43:37.986227 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.986375 kubelet[2441]: I1101 00:43:37.986247 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/ce526820-d1dc-4357-9fb7-1cb0ce632942-varrun\") pod \"csi-node-driver-9ksnm\" (UID: \"ce526820-d1dc-4357-9fb7-1cb0ce632942\") " pod="calico-system/csi-node-driver-9ksnm" Nov 1 00:43:37.986452 kubelet[2441]: E1101 00:43:37.986432 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.986452 kubelet[2441]: W1101 00:43:37.986445 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.986598 kubelet[2441]: E1101 00:43:37.986460 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.986598 kubelet[2441]: I1101 00:43:37.986480 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/ce526820-d1dc-4357-9fb7-1cb0ce632942-socket-dir\") pod \"csi-node-driver-9ksnm\" (UID: \"ce526820-d1dc-4357-9fb7-1cb0ce632942\") " pod="calico-system/csi-node-driver-9ksnm" Nov 1 00:43:37.986699 kubelet[2441]: E1101 00:43:37.986689 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.986750 kubelet[2441]: W1101 00:43:37.986701 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.986750 kubelet[2441]: E1101 00:43:37.986714 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.986750 kubelet[2441]: I1101 00:43:37.986738 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vn945\" (UniqueName: \"kubernetes.io/projected/ce526820-d1dc-4357-9fb7-1cb0ce632942-kube-api-access-vn945\") pod \"csi-node-driver-9ksnm\" (UID: \"ce526820-d1dc-4357-9fb7-1cb0ce632942\") " pod="calico-system/csi-node-driver-9ksnm" Nov 1 00:43:37.987130 kubelet[2441]: E1101 00:43:37.987065 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.987130 kubelet[2441]: W1101 00:43:37.987082 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.987130 kubelet[2441]: E1101 00:43:37.987114 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.987318 kubelet[2441]: I1101 00:43:37.987144 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/ce526820-d1dc-4357-9fb7-1cb0ce632942-registration-dir\") pod \"csi-node-driver-9ksnm\" (UID: \"ce526820-d1dc-4357-9fb7-1cb0ce632942\") " pod="calico-system/csi-node-driver-9ksnm" Nov 1 00:43:37.987579 kubelet[2441]: E1101 00:43:37.987510 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.987579 kubelet[2441]: W1101 00:43:37.987526 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.987579 kubelet[2441]: E1101 00:43:37.987541 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.989798 kubelet[2441]: E1101 00:43:37.988222 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.989798 kubelet[2441]: W1101 00:43:37.988236 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.989798 kubelet[2441]: E1101 00:43:37.988250 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.990680 kubelet[2441]: E1101 00:43:37.990647 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.990680 kubelet[2441]: W1101 00:43:37.990667 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.990847 kubelet[2441]: E1101 00:43:37.990691 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.990941 kubelet[2441]: E1101 00:43:37.990923 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.991010 kubelet[2441]: W1101 00:43:37.990942 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.991010 kubelet[2441]: E1101 00:43:37.990955 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.991184 kubelet[2441]: E1101 00:43:37.991166 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.991184 kubelet[2441]: W1101 00:43:37.991183 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.991296 kubelet[2441]: E1101 00:43:37.991196 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.991447 kubelet[2441]: E1101 00:43:37.991402 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.991447 kubelet[2441]: W1101 00:43:37.991414 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.991447 kubelet[2441]: E1101 00:43:37.991427 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.991839 kubelet[2441]: E1101 00:43:37.991803 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.991839 kubelet[2441]: W1101 00:43:37.991821 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.991839 kubelet[2441]: E1101 00:43:37.991835 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.992116 kubelet[2441]: E1101 00:43:37.992041 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.992116 kubelet[2441]: W1101 00:43:37.992055 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.992116 kubelet[2441]: E1101 00:43:37.992071 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.992295 kubelet[2441]: E1101 00:43:37.992272 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.992295 kubelet[2441]: W1101 00:43:37.992283 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.992388 kubelet[2441]: E1101 00:43:37.992297 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:37.994019 kubelet[2441]: E1101 00:43:37.992481 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:37.994019 kubelet[2441]: W1101 00:43:37.992493 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:37.994019 kubelet[2441]: E1101 00:43:37.992505 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.000628 env[1431]: time="2025-11-01T00:43:38.000535181Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:43:38.000727 env[1431]: time="2025-11-01T00:43:38.000639682Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:43:38.000727 env[1431]: time="2025-11-01T00:43:38.000671483Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:43:38.000847 env[1431]: time="2025-11-01T00:43:38.000814585Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34 pid=2935 runtime=io.containerd.runc.v2 Nov 1 00:43:38.019820 systemd[1]: Started cri-containerd-f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34.scope. Nov 1 00:43:38.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit: BPF prog-id=123 op=LOAD Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2935 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:38.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363733656366343334376236353031386166343535343932623662 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2935 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:38.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363733656366343334376236353031386166343535343932623662 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit: BPF prog-id=124 op=LOAD Nov 1 00:43:38.050000 audit[2945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000353e30 items=0 ppid=2935 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:38.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363733656366343334376236353031386166343535343932623662 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.050000 audit: BPF prog-id=125 op=LOAD Nov 1 00:43:38.050000 audit[2945]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000353e78 items=0 ppid=2935 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:38.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363733656366343334376236353031386166343535343932623662 Nov 1 00:43:38.050000 audit: BPF prog-id=125 op=UNLOAD Nov 1 00:43:38.051000 audit: BPF prog-id=124 op=UNLOAD Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { perfmon } for pid=2945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit[2945]: AVC avc: denied { bpf } for pid=2945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:38.051000 audit: BPF prog-id=126 op=LOAD Nov 1 00:43:38.051000 audit[2945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003be288 items=0 ppid=2935 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:38.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363733656366343334376236353031386166343535343932623662 Nov 1 00:43:38.067636 env[1431]: time="2025-11-01T00:43:38.067532742Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-g8pht,Uid:d0f84dbb-62cd-4d34-be12-03078086f11c,Namespace:calico-system,Attempt:0,} returns sandbox id \"f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34\"" Nov 1 00:43:38.088460 kubelet[2441]: E1101 00:43:38.088319 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.088460 kubelet[2441]: W1101 00:43:38.088340 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.088460 kubelet[2441]: E1101 00:43:38.088358 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.088728 kubelet[2441]: E1101 00:43:38.088597 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.088728 kubelet[2441]: W1101 00:43:38.088608 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.088728 kubelet[2441]: E1101 00:43:38.088625 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.088874 kubelet[2441]: E1101 00:43:38.088843 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.088874 kubelet[2441]: W1101 00:43:38.088854 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.088874 kubelet[2441]: E1101 00:43:38.088866 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.089094 kubelet[2441]: E1101 00:43:38.089078 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.089094 kubelet[2441]: W1101 00:43:38.089091 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.089226 kubelet[2441]: E1101 00:43:38.089104 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.089357 kubelet[2441]: E1101 00:43:38.089338 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.089357 kubelet[2441]: W1101 00:43:38.089352 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.089357 kubelet[2441]: E1101 00:43:38.089365 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.089637 kubelet[2441]: E1101 00:43:38.089617 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.089637 kubelet[2441]: W1101 00:43:38.089633 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.089786 kubelet[2441]: E1101 00:43:38.089647 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.089876 kubelet[2441]: E1101 00:43:38.089858 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.089876 kubelet[2441]: W1101 00:43:38.089871 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.090009 kubelet[2441]: E1101 00:43:38.089887 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.090103 kubelet[2441]: E1101 00:43:38.090085 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.090103 kubelet[2441]: W1101 00:43:38.090098 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.090209 kubelet[2441]: E1101 00:43:38.090110 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.090366 kubelet[2441]: E1101 00:43:38.090339 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.090366 kubelet[2441]: W1101 00:43:38.090353 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.090366 kubelet[2441]: E1101 00:43:38.090365 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.090585 kubelet[2441]: E1101 00:43:38.090568 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.090585 kubelet[2441]: W1101 00:43:38.090582 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.090698 kubelet[2441]: E1101 00:43:38.090594 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.090800 kubelet[2441]: E1101 00:43:38.090783 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.090800 kubelet[2441]: W1101 00:43:38.090796 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.090966 kubelet[2441]: E1101 00:43:38.090810 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.091024 kubelet[2441]: E1101 00:43:38.091008 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.091072 kubelet[2441]: W1101 00:43:38.091023 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.091072 kubelet[2441]: E1101 00:43:38.091035 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.091268 kubelet[2441]: E1101 00:43:38.091241 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.091268 kubelet[2441]: W1101 00:43:38.091256 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.091268 kubelet[2441]: E1101 00:43:38.091267 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.091476 kubelet[2441]: E1101 00:43:38.091458 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.091476 kubelet[2441]: W1101 00:43:38.091471 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.091619 kubelet[2441]: E1101 00:43:38.091482 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.091710 kubelet[2441]: E1101 00:43:38.091692 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.091710 kubelet[2441]: W1101 00:43:38.091708 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.091812 kubelet[2441]: E1101 00:43:38.091720 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.092060 kubelet[2441]: E1101 00:43:38.092041 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.092060 kubelet[2441]: W1101 00:43:38.092055 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.092204 kubelet[2441]: E1101 00:43:38.092070 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.092283 kubelet[2441]: E1101 00:43:38.092265 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.092283 kubelet[2441]: W1101 00:43:38.092279 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.092409 kubelet[2441]: E1101 00:43:38.092291 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.092491 kubelet[2441]: E1101 00:43:38.092474 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.092491 kubelet[2441]: W1101 00:43:38.092487 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.092627 kubelet[2441]: E1101 00:43:38.092500 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.092739 kubelet[2441]: E1101 00:43:38.092721 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.092739 kubelet[2441]: W1101 00:43:38.092735 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.092865 kubelet[2441]: E1101 00:43:38.092747 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.092944 kubelet[2441]: E1101 00:43:38.092927 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.092944 kubelet[2441]: W1101 00:43:38.092940 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.093047 kubelet[2441]: E1101 00:43:38.092952 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.093199 kubelet[2441]: E1101 00:43:38.093173 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.093199 kubelet[2441]: W1101 00:43:38.093186 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.093199 kubelet[2441]: E1101 00:43:38.093198 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.093403 kubelet[2441]: E1101 00:43:38.093385 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.093403 kubelet[2441]: W1101 00:43:38.093398 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.093516 kubelet[2441]: E1101 00:43:38.093412 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.093663 kubelet[2441]: E1101 00:43:38.093647 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.093663 kubelet[2441]: W1101 00:43:38.093660 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.093797 kubelet[2441]: E1101 00:43:38.093673 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.093878 kubelet[2441]: E1101 00:43:38.093861 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.093878 kubelet[2441]: W1101 00:43:38.093874 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.094004 kubelet[2441]: E1101 00:43:38.093886 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.094109 kubelet[2441]: E1101 00:43:38.094091 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.094109 kubelet[2441]: W1101 00:43:38.094104 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.094208 kubelet[2441]: E1101 00:43:38.094117 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:38.102274 kubelet[2441]: E1101 00:43:38.102247 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:38.102274 kubelet[2441]: W1101 00:43:38.102263 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:38.102384 kubelet[2441]: E1101 00:43:38.102285 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:39.161801 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2582277372.mount: Deactivated successfully. Nov 1 00:43:39.235938 kubelet[2441]: E1101 00:43:39.235879 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:43:40.317813 env[1431]: time="2025-11-01T00:43:40.317763335Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:40.324276 env[1431]: time="2025-11-01T00:43:40.324243015Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:40.329440 env[1431]: time="2025-11-01T00:43:40.329411579Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:40.347821 env[1431]: time="2025-11-01T00:43:40.347778906Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:40.348361 env[1431]: time="2025-11-01T00:43:40.348326513Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958\"" Nov 1 00:43:40.362583 env[1431]: time="2025-11-01T00:43:40.356971619Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:43:40.366000 env[1431]: time="2025-11-01T00:43:40.365971231Z" level=info msg="CreateContainer within sandbox \"9edea0651274b1711f2d7725daf6ce91dfd9b8e4f71b1e513322b66acd87f771\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:43:40.400141 env[1431]: time="2025-11-01T00:43:40.400109452Z" level=info msg="CreateContainer within sandbox \"9edea0651274b1711f2d7725daf6ce91dfd9b8e4f71b1e513322b66acd87f771\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"1d3222fea095632ba13fff5f1c9b4182ff58afd3cca8cb44348f042bb0bd1182\"" Nov 1 00:43:40.401262 env[1431]: time="2025-11-01T00:43:40.400726760Z" level=info msg="StartContainer for \"1d3222fea095632ba13fff5f1c9b4182ff58afd3cca8cb44348f042bb0bd1182\"" Nov 1 00:43:40.431089 systemd[1]: Started cri-containerd-1d3222fea095632ba13fff5f1c9b4182ff58afd3cca8cb44348f042bb0bd1182.scope. Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.443000 audit: BPF prog-id=127 op=LOAD Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2847 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:40.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333232326665613039353633326261313366666635663163396234 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2847 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:40.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333232326665613039353633326261313366666635663163396234 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.444000 audit: BPF prog-id=128 op=LOAD Nov 1 00:43:40.444000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000383000 items=0 ppid=2847 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:40.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333232326665613039353633326261313366666635663163396234 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit: BPF prog-id=129 op=LOAD Nov 1 00:43:40.445000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000383048 items=0 ppid=2847 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:40.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333232326665613039353633326261313366666635663163396234 Nov 1 00:43:40.445000 audit: BPF prog-id=129 op=UNLOAD Nov 1 00:43:40.445000 audit: BPF prog-id=128 op=UNLOAD Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:40.445000 audit: BPF prog-id=130 op=LOAD Nov 1 00:43:40.445000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000383458 items=0 ppid=2847 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:40.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333232326665613039353633326261313366666635663163396234 Nov 1 00:43:40.486466 env[1431]: time="2025-11-01T00:43:40.486381418Z" level=info msg="StartContainer for \"1d3222fea095632ba13fff5f1c9b4182ff58afd3cca8cb44348f042bb0bd1182\" returns successfully" Nov 1 00:43:41.235852 kubelet[2441]: E1101 00:43:41.235795 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:43:41.368544 kubelet[2441]: E1101 00:43:41.368511 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.368729 kubelet[2441]: W1101 00:43:41.368539 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.368729 kubelet[2441]: E1101 00:43:41.368593 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.369269 kubelet[2441]: E1101 00:43:41.369246 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.369368 kubelet[2441]: W1101 00:43:41.369265 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.369368 kubelet[2441]: E1101 00:43:41.369300 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.369587 kubelet[2441]: E1101 00:43:41.369572 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.369664 kubelet[2441]: W1101 00:43:41.369588 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.369664 kubelet[2441]: E1101 00:43:41.369602 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.369965 kubelet[2441]: E1101 00:43:41.369926 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.369965 kubelet[2441]: W1101 00:43:41.369954 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.370142 kubelet[2441]: E1101 00:43:41.369968 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.370233 kubelet[2441]: E1101 00:43:41.370200 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.370233 kubelet[2441]: W1101 00:43:41.370211 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.370233 kubelet[2441]: E1101 00:43:41.370223 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.370471 kubelet[2441]: E1101 00:43:41.370456 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.370535 kubelet[2441]: W1101 00:43:41.370472 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.370535 kubelet[2441]: E1101 00:43:41.370485 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.370772 kubelet[2441]: E1101 00:43:41.370756 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.370847 kubelet[2441]: W1101 00:43:41.370786 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.370847 kubelet[2441]: E1101 00:43:41.370800 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.370990 kubelet[2441]: E1101 00:43:41.370975 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.371047 kubelet[2441]: W1101 00:43:41.370991 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.371047 kubelet[2441]: E1101 00:43:41.371002 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.371273 kubelet[2441]: E1101 00:43:41.371253 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.371273 kubelet[2441]: W1101 00:43:41.371267 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.371389 kubelet[2441]: E1101 00:43:41.371281 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.371996 kubelet[2441]: E1101 00:43:41.371976 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.371996 kubelet[2441]: W1101 00:43:41.371990 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.372163 kubelet[2441]: E1101 00:43:41.372003 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.372217 kubelet[2441]: E1101 00:43:41.372200 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.372217 kubelet[2441]: W1101 00:43:41.372210 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.372306 kubelet[2441]: E1101 00:43:41.372222 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.372468 kubelet[2441]: E1101 00:43:41.372453 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.372468 kubelet[2441]: W1101 00:43:41.372466 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.372649 kubelet[2441]: E1101 00:43:41.372478 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.372824 kubelet[2441]: E1101 00:43:41.372807 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.372824 kubelet[2441]: W1101 00:43:41.372820 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.372944 kubelet[2441]: E1101 00:43:41.372833 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.373093 kubelet[2441]: E1101 00:43:41.373076 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.373093 kubelet[2441]: W1101 00:43:41.373089 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.373215 kubelet[2441]: E1101 00:43:41.373102 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.373363 kubelet[2441]: E1101 00:43:41.373346 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.373363 kubelet[2441]: W1101 00:43:41.373359 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.373506 kubelet[2441]: E1101 00:43:41.373371 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.409432 kubelet[2441]: E1101 00:43:41.409185 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.409432 kubelet[2441]: W1101 00:43:41.409205 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.409432 kubelet[2441]: E1101 00:43:41.409222 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.409699 kubelet[2441]: E1101 00:43:41.409438 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.409699 kubelet[2441]: W1101 00:43:41.409448 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.409699 kubelet[2441]: E1101 00:43:41.409459 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.409839 kubelet[2441]: E1101 00:43:41.409714 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.409839 kubelet[2441]: W1101 00:43:41.409725 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.409839 kubelet[2441]: E1101 00:43:41.409738 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.409999 kubelet[2441]: E1101 00:43:41.409968 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.409999 kubelet[2441]: W1101 00:43:41.409981 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.409999 kubelet[2441]: E1101 00:43:41.409994 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.411575 kubelet[2441]: E1101 00:43:41.410201 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.411575 kubelet[2441]: W1101 00:43:41.410216 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.411575 kubelet[2441]: E1101 00:43:41.410228 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.411575 kubelet[2441]: E1101 00:43:41.410411 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.411575 kubelet[2441]: W1101 00:43:41.410419 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.411575 kubelet[2441]: E1101 00:43:41.410428 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.411575 kubelet[2441]: E1101 00:43:41.410638 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.411575 kubelet[2441]: W1101 00:43:41.410648 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.411575 kubelet[2441]: E1101 00:43:41.410659 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.411575 kubelet[2441]: E1101 00:43:41.411232 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.412145 kubelet[2441]: W1101 00:43:41.411244 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.412145 kubelet[2441]: E1101 00:43:41.411257 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.412145 kubelet[2441]: E1101 00:43:41.411455 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.412145 kubelet[2441]: W1101 00:43:41.411463 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.412145 kubelet[2441]: E1101 00:43:41.411473 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.412145 kubelet[2441]: E1101 00:43:41.411692 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.412145 kubelet[2441]: W1101 00:43:41.411703 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.412145 kubelet[2441]: E1101 00:43:41.411716 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.412145 kubelet[2441]: E1101 00:43:41.411912 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.412145 kubelet[2441]: W1101 00:43:41.411922 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.412639 kubelet[2441]: E1101 00:43:41.411935 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.412639 kubelet[2441]: E1101 00:43:41.412131 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.412639 kubelet[2441]: W1101 00:43:41.412140 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.412639 kubelet[2441]: E1101 00:43:41.412150 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.412639 kubelet[2441]: E1101 00:43:41.412376 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.412639 kubelet[2441]: W1101 00:43:41.412386 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.412639 kubelet[2441]: E1101 00:43:41.412398 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.413816 kubelet[2441]: E1101 00:43:41.412767 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.413816 kubelet[2441]: W1101 00:43:41.412778 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.413816 kubelet[2441]: E1101 00:43:41.412790 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.413816 kubelet[2441]: E1101 00:43:41.412988 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.413816 kubelet[2441]: W1101 00:43:41.412998 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.413816 kubelet[2441]: E1101 00:43:41.413009 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.413816 kubelet[2441]: E1101 00:43:41.413163 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.413816 kubelet[2441]: W1101 00:43:41.413170 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.413816 kubelet[2441]: E1101 00:43:41.413179 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.413816 kubelet[2441]: E1101 00:43:41.413367 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.414102 kubelet[2441]: W1101 00:43:41.413376 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.414102 kubelet[2441]: E1101 00:43:41.413386 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.414102 kubelet[2441]: E1101 00:43:41.413772 2441 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:43:41.414102 kubelet[2441]: W1101 00:43:41.413783 2441 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:43:41.414102 kubelet[2441]: E1101 00:43:41.413796 2441 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:43:41.518232 env[1431]: time="2025-11-01T00:43:41.516624923Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:41.531278 env[1431]: time="2025-11-01T00:43:41.531247000Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:41.540646 env[1431]: time="2025-11-01T00:43:41.540613714Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:41.545385 env[1431]: time="2025-11-01T00:43:41.545303570Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:41.546071 env[1431]: time="2025-11-01T00:43:41.546029479Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5\"" Nov 1 00:43:41.564020 env[1431]: time="2025-11-01T00:43:41.563986897Z" level=info msg="CreateContainer within sandbox \"f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:43:41.603411 env[1431]: time="2025-11-01T00:43:41.603363774Z" level=info msg="CreateContainer within sandbox \"f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"b1e0e6ddb39fef269ab397cd884d649df40867dfce821abc70381af2c690adff\"" Nov 1 00:43:41.605508 env[1431]: time="2025-11-01T00:43:41.603883580Z" level=info msg="StartContainer for \"b1e0e6ddb39fef269ab397cd884d649df40867dfce821abc70381af2c690adff\"" Nov 1 00:43:41.626919 systemd[1]: Started cri-containerd-b1e0e6ddb39fef269ab397cd884d649df40867dfce821abc70381af2c690adff.scope. Nov 1 00:43:41.643000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.643000 audit[3081]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7fc079be5b98 items=0 ppid=2935 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:41.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231653065366464623339666566323639616233393763643838346436 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit: BPF prog-id=131 op=LOAD Nov 1 00:43:41.644000 audit[3081]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c000390448 items=0 ppid=2935 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:41.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231653065366464623339666566323639616233393763643838346436 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.644000 audit: BPF prog-id=132 op=LOAD Nov 1 00:43:41.644000 audit[3081]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c000390498 items=0 ppid=2935 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:41.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231653065366464623339666566323639616233393763643838346436 Nov 1 00:43:41.645000 audit: BPF prog-id=132 op=UNLOAD Nov 1 00:43:41.645000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { perfmon } for pid=3081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit[3081]: AVC avc: denied { bpf } for pid=3081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:41.645000 audit: BPF prog-id=133 op=LOAD Nov 1 00:43:41.645000 audit[3081]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c000390528 items=0 ppid=2935 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:41.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231653065366464623339666566323639616233393763643838346436 Nov 1 00:43:41.662509 env[1431]: time="2025-11-01T00:43:41.662460290Z" level=info msg="StartContainer for \"b1e0e6ddb39fef269ab397cd884d649df40867dfce821abc70381af2c690adff\" returns successfully" Nov 1 00:43:41.670917 systemd[1]: cri-containerd-b1e0e6ddb39fef269ab397cd884d649df40867dfce821abc70381af2c690adff.scope: Deactivated successfully. Nov 1 00:43:41.673000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:43:41.693546 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b1e0e6ddb39fef269ab397cd884d649df40867dfce821abc70381af2c690adff-rootfs.mount: Deactivated successfully. Nov 1 00:43:42.416670 kubelet[2441]: I1101 00:43:42.335465 2441 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:43:42.416670 kubelet[2441]: I1101 00:43:42.352174 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6bbcbdfd9c-dq588" podStartSLOduration=2.979128106 podStartE2EDuration="5.352155568s" podCreationTimestamp="2025-11-01 00:43:37 +0000 UTC" firstStartedPulling="2025-11-01 00:43:37.976503966 +0000 UTC m=+22.680531334" lastFinishedPulling="2025-11-01 00:43:40.349531328 +0000 UTC m=+25.053558796" observedRunningTime="2025-11-01 00:43:41.348693988 +0000 UTC m=+26.052721356" watchObservedRunningTime="2025-11-01 00:43:42.352155568 +0000 UTC m=+27.056182936" Nov 1 00:43:43.171943 env[1431]: time="2025-11-01T00:43:43.171883579Z" level=info msg="shim disconnected" id=b1e0e6ddb39fef269ab397cd884d649df40867dfce821abc70381af2c690adff Nov 1 00:43:43.172408 env[1431]: time="2025-11-01T00:43:43.171957180Z" level=warning msg="cleaning up after shim disconnected" id=b1e0e6ddb39fef269ab397cd884d649df40867dfce821abc70381af2c690adff namespace=k8s.io Nov 1 00:43:43.172408 env[1431]: time="2025-11-01T00:43:43.171970880Z" level=info msg="cleaning up dead shim" Nov 1 00:43:43.180391 env[1431]: time="2025-11-01T00:43:43.180349878Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:43:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3127 runtime=io.containerd.runc.v2\n" Nov 1 00:43:43.236320 kubelet[2441]: E1101 00:43:43.236275 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:43:43.342954 env[1431]: time="2025-11-01T00:43:43.342529971Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:43:45.235985 kubelet[2441]: E1101 00:43:45.235928 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:43:46.681645 env[1431]: time="2025-11-01T00:43:46.681599994Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:46.686634 env[1431]: time="2025-11-01T00:43:46.686597349Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:46.690264 env[1431]: time="2025-11-01T00:43:46.690232690Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:46.694208 env[1431]: time="2025-11-01T00:43:46.694174433Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:46.694725 env[1431]: time="2025-11-01T00:43:46.694693039Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd\"" Nov 1 00:43:46.701347 env[1431]: time="2025-11-01T00:43:46.701312512Z" level=info msg="CreateContainer within sandbox \"f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:43:46.727943 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount181628455.mount: Deactivated successfully. Nov 1 00:43:46.760670 env[1431]: time="2025-11-01T00:43:46.760632068Z" level=info msg="CreateContainer within sandbox \"f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9\"" Nov 1 00:43:46.762162 env[1431]: time="2025-11-01T00:43:46.762135384Z" level=info msg="StartContainer for \"e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9\"" Nov 1 00:43:46.793766 systemd[1]: Started cri-containerd-e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9.scope. Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.816365 kernel: kauditd_printk_skb: 217 callbacks suppressed Nov 1 00:43:46.816465 kernel: audit: type=1400 audit(1761957826.811:982): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fcb9e30c2d8 items=0 ppid=2935 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:46.851796 kernel: audit: type=1300 audit(1761957826.811:982): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fcb9e30c2d8 items=0 ppid=2935 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536343266353563316266646464383135613161313362323338613961 Nov 1 00:43:46.879332 kernel: audit: type=1327 audit(1761957826.811:982): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536343266353563316266646464383135613161313362323338613961 Nov 1 00:43:46.879439 env[1431]: time="2025-11-01T00:43:46.877320558Z" level=info msg="StartContainer for \"e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9\" returns successfully" Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.902850 kernel: audit: type=1400 audit(1761957826.811:983): avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.916684 kernel: audit: type=1400 audit(1761957826.811:983): avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.945049 kernel: audit: type=1400 audit(1761957826.811:983): avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.945160 kernel: audit: type=1400 audit(1761957826.811:983): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.945190 kernel: audit: type=1400 audit(1761957826.811:983): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.958603 kernel: audit: type=1400 audit(1761957826.811:983): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.969576 kernel: audit: type=1400 audit(1761957826.811:983): avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit: BPF prog-id=134 op=LOAD Nov 1 00:43:46.811000 audit[3146]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002e1ea8 items=0 ppid=2935 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536343266353563316266646464383135613161313362323338613961 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit: BPF prog-id=135 op=LOAD Nov 1 00:43:46.811000 audit[3146]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002e1ef8 items=0 ppid=2935 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536343266353563316266646464383135613161313362323338613961 Nov 1 00:43:46.811000 audit: BPF prog-id=135 op=UNLOAD Nov 1 00:43:46.811000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { perfmon } for pid=3146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit[3146]: AVC avc: denied { bpf } for pid=3146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:46.811000 audit: BPF prog-id=136 op=LOAD Nov 1 00:43:46.811000 audit[3146]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002e1f88 items=0 ppid=2935 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536343266353563316266646464383135613161313362323338613961 Nov 1 00:43:47.237144 kubelet[2441]: E1101 00:43:47.235614 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:43:47.723524 systemd[1]: run-containerd-runc-k8s.io-e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9-runc.ngJ1eh.mount: Deactivated successfully. Nov 1 00:43:48.502704 env[1431]: time="2025-11-01T00:43:48.502631541Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:43:48.506584 systemd[1]: cri-containerd-e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9.scope: Deactivated successfully. Nov 1 00:43:48.509000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:43:48.536267 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9-rootfs.mount: Deactivated successfully. Nov 1 00:43:48.609588 kubelet[2441]: I1101 00:43:48.608487 2441 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:43:49.776759 systemd[1]: Created slice kubepods-besteffort-podce526820_d1dc_4357_9fb7_1cb0ce632942.slice. Nov 1 00:43:49.780154 env[1431]: time="2025-11-01T00:43:49.780090836Z" level=info msg="shim disconnected" id=e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9 Nov 1 00:43:49.780154 env[1431]: time="2025-11-01T00:43:49.780144536Z" level=warning msg="cleaning up after shim disconnected" id=e642f55c1bfddd815a1a13b238a9a3fe34e43578e3d7d87abf800479bfc7e8c9 namespace=k8s.io Nov 1 00:43:49.780594 env[1431]: time="2025-11-01T00:43:49.780157936Z" level=info msg="cleaning up dead shim" Nov 1 00:43:49.790651 systemd[1]: Created slice kubepods-besteffort-podc915da59_bb95_407a_9154_f5c2aba07ef1.slice. Nov 1 00:43:49.801170 env[1431]: time="2025-11-01T00:43:49.801129556Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9ksnm,Uid:ce526820-d1dc-4357-9fb7-1cb0ce632942,Namespace:calico-system,Attempt:0,}" Nov 1 00:43:49.815206 env[1431]: time="2025-11-01T00:43:49.814047192Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:43:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3184 runtime=io.containerd.runc.v2\n" Nov 1 00:43:49.815030 systemd[1]: Created slice kubepods-besteffort-podc8835bb5_2375_444c_85bc_4149b7d50cd0.slice. Nov 1 00:43:49.834944 systemd[1]: Created slice kubepods-burstable-pod687a4ecc_224e_4643_b429_c02add92af85.slice. Nov 1 00:43:49.842859 systemd[1]: Created slice kubepods-besteffort-pod31c65c5c_1a06_4110_b81b_98d3530e65c1.slice. Nov 1 00:43:49.866844 systemd[1]: Created slice kubepods-besteffort-podc4fa1769_b5ef_44fb_bb2e_c91531ca49da.slice. Nov 1 00:43:49.874582 kubelet[2441]: I1101 00:43:49.874531 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/31c65c5c-1a06-4110-b81b-98d3530e65c1-config\") pod \"goldmane-666569f655-cpllc\" (UID: \"31c65c5c-1a06-4110-b81b-98d3530e65c1\") " pod="calico-system/goldmane-666569f655-cpllc" Nov 1 00:43:49.877501 systemd[1]: Created slice kubepods-besteffort-pod4c3c0e0e_07f0_4e99_8395_721e399f588a.slice. Nov 1 00:43:49.883208 kubelet[2441]: I1101 00:43:49.883181 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/31c65c5c-1a06-4110-b81b-98d3530e65c1-goldmane-key-pair\") pod \"goldmane-666569f655-cpllc\" (UID: \"31c65c5c-1a06-4110-b81b-98d3530e65c1\") " pod="calico-system/goldmane-666569f655-cpllc" Nov 1 00:43:49.883400 kubelet[2441]: I1101 00:43:49.883380 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zm5x4\" (UniqueName: \"kubernetes.io/projected/31c65c5c-1a06-4110-b81b-98d3530e65c1-kube-api-access-zm5x4\") pod \"goldmane-666569f655-cpllc\" (UID: \"31c65c5c-1a06-4110-b81b-98d3530e65c1\") " pod="calico-system/goldmane-666569f655-cpllc" Nov 1 00:43:49.883609 kubelet[2441]: I1101 00:43:49.883542 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c915da59-bb95-407a-9154-f5c2aba07ef1-whisker-ca-bundle\") pod \"whisker-7bd5b8dfcb-j5hb6\" (UID: \"c915da59-bb95-407a-9154-f5c2aba07ef1\") " pod="calico-system/whisker-7bd5b8dfcb-j5hb6" Nov 1 00:43:49.883779 kubelet[2441]: I1101 00:43:49.883761 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/687a4ecc-224e-4643-b429-c02add92af85-config-volume\") pod \"coredns-674b8bbfcf-jfx7f\" (UID: \"687a4ecc-224e-4643-b429-c02add92af85\") " pod="kube-system/coredns-674b8bbfcf-jfx7f" Nov 1 00:43:49.884305 kubelet[2441]: I1101 00:43:49.884284 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/4c3c0e0e-07f0-4e99-8395-721e399f588a-calico-apiserver-certs\") pod \"calico-apiserver-56df8c5d4b-rfbnt\" (UID: \"4c3c0e0e-07f0-4e99-8395-721e399f588a\") " pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" Nov 1 00:43:49.884475 kubelet[2441]: I1101 00:43:49.884455 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-78pww\" (UniqueName: \"kubernetes.io/projected/4c3c0e0e-07f0-4e99-8395-721e399f588a-kube-api-access-78pww\") pod \"calico-apiserver-56df8c5d4b-rfbnt\" (UID: \"4c3c0e0e-07f0-4e99-8395-721e399f588a\") " pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" Nov 1 00:43:49.884652 kubelet[2441]: I1101 00:43:49.884635 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/31c65c5c-1a06-4110-b81b-98d3530e65c1-goldmane-ca-bundle\") pod \"goldmane-666569f655-cpllc\" (UID: \"31c65c5c-1a06-4110-b81b-98d3530e65c1\") " pod="calico-system/goldmane-666569f655-cpllc" Nov 1 00:43:49.884803 kubelet[2441]: I1101 00:43:49.884786 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c4fa1769-b5ef-44fb-bb2e-c91531ca49da-calico-apiserver-certs\") pod \"calico-apiserver-56df8c5d4b-65nv4\" (UID: \"c4fa1769-b5ef-44fb-bb2e-c91531ca49da\") " pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" Nov 1 00:43:49.884937 kubelet[2441]: I1101 00:43:49.884920 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h4s8q\" (UniqueName: \"kubernetes.io/projected/c4fa1769-b5ef-44fb-bb2e-c91531ca49da-kube-api-access-h4s8q\") pod \"calico-apiserver-56df8c5d4b-65nv4\" (UID: \"c4fa1769-b5ef-44fb-bb2e-c91531ca49da\") " pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" Nov 1 00:43:49.885100 kubelet[2441]: I1101 00:43:49.885082 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c8835bb5-2375-444c-85bc-4149b7d50cd0-tigera-ca-bundle\") pod \"calico-kube-controllers-578795468d-6l946\" (UID: \"c8835bb5-2375-444c-85bc-4149b7d50cd0\") " pod="calico-system/calico-kube-controllers-578795468d-6l946" Nov 1 00:43:49.885243 kubelet[2441]: I1101 00:43:49.885225 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2dxjp\" (UniqueName: \"kubernetes.io/projected/c8835bb5-2375-444c-85bc-4149b7d50cd0-kube-api-access-2dxjp\") pod \"calico-kube-controllers-578795468d-6l946\" (UID: \"c8835bb5-2375-444c-85bc-4149b7d50cd0\") " pod="calico-system/calico-kube-controllers-578795468d-6l946" Nov 1 00:43:49.885379 kubelet[2441]: I1101 00:43:49.885363 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a1f1ab45-e8ff-47b7-b5f4-8707d57d8285-config-volume\") pod \"coredns-674b8bbfcf-n8ngt\" (UID: \"a1f1ab45-e8ff-47b7-b5f4-8707d57d8285\") " pod="kube-system/coredns-674b8bbfcf-n8ngt" Nov 1 00:43:49.885503 kubelet[2441]: I1101 00:43:49.885487 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h8hn9\" (UniqueName: \"kubernetes.io/projected/687a4ecc-224e-4643-b429-c02add92af85-kube-api-access-h8hn9\") pod \"coredns-674b8bbfcf-jfx7f\" (UID: \"687a4ecc-224e-4643-b429-c02add92af85\") " pod="kube-system/coredns-674b8bbfcf-jfx7f" Nov 1 00:43:49.885703 kubelet[2441]: I1101 00:43:49.885686 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c915da59-bb95-407a-9154-f5c2aba07ef1-whisker-backend-key-pair\") pod \"whisker-7bd5b8dfcb-j5hb6\" (UID: \"c915da59-bb95-407a-9154-f5c2aba07ef1\") " pod="calico-system/whisker-7bd5b8dfcb-j5hb6" Nov 1 00:43:49.885859 kubelet[2441]: I1101 00:43:49.885842 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9gg65\" (UniqueName: \"kubernetes.io/projected/c915da59-bb95-407a-9154-f5c2aba07ef1-kube-api-access-9gg65\") pod \"whisker-7bd5b8dfcb-j5hb6\" (UID: \"c915da59-bb95-407a-9154-f5c2aba07ef1\") " pod="calico-system/whisker-7bd5b8dfcb-j5hb6" Nov 1 00:43:49.886001 kubelet[2441]: I1101 00:43:49.885980 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-slncx\" (UniqueName: \"kubernetes.io/projected/a1f1ab45-e8ff-47b7-b5f4-8707d57d8285-kube-api-access-slncx\") pod \"coredns-674b8bbfcf-n8ngt\" (UID: \"a1f1ab45-e8ff-47b7-b5f4-8707d57d8285\") " pod="kube-system/coredns-674b8bbfcf-n8ngt" Nov 1 00:43:49.889002 systemd[1]: Created slice kubepods-burstable-poda1f1ab45_e8ff_47b7_b5f4_8707d57d8285.slice. Nov 1 00:43:49.938798 env[1431]: time="2025-11-01T00:43:49.938730100Z" level=error msg="Failed to destroy network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:49.943404 env[1431]: time="2025-11-01T00:43:49.942002034Z" level=error msg="encountered an error cleaning up failed sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:49.943404 env[1431]: time="2025-11-01T00:43:49.942074035Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9ksnm,Uid:ce526820-d1dc-4357-9fb7-1cb0ce632942,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:49.943512 kubelet[2441]: E1101 00:43:49.942342 2441 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:49.943512 kubelet[2441]: E1101 00:43:49.942441 2441 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-9ksnm" Nov 1 00:43:49.943512 kubelet[2441]: E1101 00:43:49.942489 2441 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-9ksnm" Nov 1 00:43:49.941722 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5-shm.mount: Deactivated successfully. Nov 1 00:43:49.943801 kubelet[2441]: E1101 00:43:49.942586 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:43:50.111652 env[1431]: time="2025-11-01T00:43:50.110322581Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7bd5b8dfcb-j5hb6,Uid:c915da59-bb95-407a-9154-f5c2aba07ef1,Namespace:calico-system,Attempt:0,}" Nov 1 00:43:50.132019 env[1431]: time="2025-11-01T00:43:50.131980505Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-578795468d-6l946,Uid:c8835bb5-2375-444c-85bc-4149b7d50cd0,Namespace:calico-system,Attempt:0,}" Nov 1 00:43:50.140579 env[1431]: time="2025-11-01T00:43:50.140496193Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-jfx7f,Uid:687a4ecc-224e-4643-b429-c02add92af85,Namespace:kube-system,Attempt:0,}" Nov 1 00:43:50.159660 env[1431]: time="2025-11-01T00:43:50.159626990Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-cpllc,Uid:31c65c5c-1a06-4110-b81b-98d3530e65c1,Namespace:calico-system,Attempt:0,}" Nov 1 00:43:50.171001 env[1431]: time="2025-11-01T00:43:50.170967607Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56df8c5d4b-65nv4,Uid:c4fa1769-b5ef-44fb-bb2e-c91531ca49da,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:43:50.183064 env[1431]: time="2025-11-01T00:43:50.183032132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56df8c5d4b-rfbnt,Uid:4c3c0e0e-07f0-4e99-8395-721e399f588a,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:43:50.198113 env[1431]: time="2025-11-01T00:43:50.198071087Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n8ngt,Uid:a1f1ab45-e8ff-47b7-b5f4-8707d57d8285,Namespace:kube-system,Attempt:0,}" Nov 1 00:43:50.250701 env[1431]: time="2025-11-01T00:43:50.250641429Z" level=error msg="Failed to destroy network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.251330 env[1431]: time="2025-11-01T00:43:50.251284036Z" level=error msg="encountered an error cleaning up failed sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.251531 env[1431]: time="2025-11-01T00:43:50.251486038Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7bd5b8dfcb-j5hb6,Uid:c915da59-bb95-407a-9154-f5c2aba07ef1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.252009 kubelet[2441]: E1101 00:43:50.251867 2441 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.254259 kubelet[2441]: E1101 00:43:50.251928 2441 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7bd5b8dfcb-j5hb6" Nov 1 00:43:50.254259 kubelet[2441]: E1101 00:43:50.252162 2441 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7bd5b8dfcb-j5hb6" Nov 1 00:43:50.254259 kubelet[2441]: E1101 00:43:50.252268 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7bd5b8dfcb-j5hb6_calico-system(c915da59-bb95-407a-9154-f5c2aba07ef1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7bd5b8dfcb-j5hb6_calico-system(c915da59-bb95-407a-9154-f5c2aba07ef1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7bd5b8dfcb-j5hb6" podUID="c915da59-bb95-407a-9154-f5c2aba07ef1" Nov 1 00:43:50.291080 env[1431]: time="2025-11-01T00:43:50.291029246Z" level=error msg="Failed to destroy network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.291385 env[1431]: time="2025-11-01T00:43:50.291346549Z" level=error msg="encountered an error cleaning up failed sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.291494 env[1431]: time="2025-11-01T00:43:50.291405250Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-jfx7f,Uid:687a4ecc-224e-4643-b429-c02add92af85,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.291656 kubelet[2441]: E1101 00:43:50.291622 2441 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.291747 kubelet[2441]: E1101 00:43:50.291677 2441 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-jfx7f" Nov 1 00:43:50.291747 kubelet[2441]: E1101 00:43:50.291703 2441 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-jfx7f" Nov 1 00:43:50.291833 kubelet[2441]: E1101 00:43:50.291761 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-jfx7f_kube-system(687a4ecc-224e-4643-b429-c02add92af85)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-jfx7f_kube-system(687a4ecc-224e-4643-b429-c02add92af85)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-jfx7f" podUID="687a4ecc-224e-4643-b429-c02add92af85" Nov 1 00:43:50.339760 env[1431]: time="2025-11-01T00:43:50.339699748Z" level=error msg="Failed to destroy network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.340099 env[1431]: time="2025-11-01T00:43:50.340052252Z" level=error msg="encountered an error cleaning up failed sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.340207 env[1431]: time="2025-11-01T00:43:50.340124552Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-578795468d-6l946,Uid:c8835bb5-2375-444c-85bc-4149b7d50cd0,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.340440 kubelet[2441]: E1101 00:43:50.340383 2441 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.340539 kubelet[2441]: E1101 00:43:50.340470 2441 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-578795468d-6l946" Nov 1 00:43:50.340539 kubelet[2441]: E1101 00:43:50.340510 2441 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-578795468d-6l946" Nov 1 00:43:50.340671 kubelet[2441]: E1101 00:43:50.340621 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-578795468d-6l946_calico-system(c8835bb5-2375-444c-85bc-4149b7d50cd0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-578795468d-6l946_calico-system(c8835bb5-2375-444c-85bc-4149b7d50cd0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:43:50.377827 env[1431]: time="2025-11-01T00:43:50.377325236Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:43:50.379399 kubelet[2441]: I1101 00:43:50.379368 2441 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:43:50.380359 env[1431]: time="2025-11-01T00:43:50.380322367Z" level=info msg="StopPodSandbox for \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\"" Nov 1 00:43:50.385473 kubelet[2441]: I1101 00:43:50.381748 2441 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:43:50.385620 env[1431]: time="2025-11-01T00:43:50.383723902Z" level=info msg="StopPodSandbox for \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\"" Nov 1 00:43:50.398145 kubelet[2441]: I1101 00:43:50.398104 2441 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:43:50.399701 env[1431]: time="2025-11-01T00:43:50.398983860Z" level=info msg="StopPodSandbox for \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\"" Nov 1 00:43:50.400456 kubelet[2441]: I1101 00:43:50.400422 2441 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:43:50.401150 env[1431]: time="2025-11-01T00:43:50.401107782Z" level=info msg="StopPodSandbox for \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\"" Nov 1 00:43:50.507577 env[1431]: time="2025-11-01T00:43:50.507501279Z" level=error msg="StopPodSandbox for \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\" failed" error="failed to destroy network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.508056 kubelet[2441]: E1101 00:43:50.508010 2441 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:43:50.508180 kubelet[2441]: E1101 00:43:50.508090 2441 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a"} Nov 1 00:43:50.508234 kubelet[2441]: E1101 00:43:50.508180 2441 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c915da59-bb95-407a-9154-f5c2aba07ef1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:43:50.508346 kubelet[2441]: E1101 00:43:50.508224 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c915da59-bb95-407a-9154-f5c2aba07ef1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7bd5b8dfcb-j5hb6" podUID="c915da59-bb95-407a-9154-f5c2aba07ef1" Nov 1 00:43:50.539065 env[1431]: time="2025-11-01T00:43:50.539004104Z" level=error msg="StopPodSandbox for \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\" failed" error="failed to destroy network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.539523 kubelet[2441]: E1101 00:43:50.539471 2441 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:43:50.539657 kubelet[2441]: E1101 00:43:50.539542 2441 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4"} Nov 1 00:43:50.539657 kubelet[2441]: E1101 00:43:50.539628 2441 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"687a4ecc-224e-4643-b429-c02add92af85\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:43:50.539845 kubelet[2441]: E1101 00:43:50.539670 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"687a4ecc-224e-4643-b429-c02add92af85\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-jfx7f" podUID="687a4ecc-224e-4643-b429-c02add92af85" Nov 1 00:43:50.554629 env[1431]: time="2025-11-01T00:43:50.554537765Z" level=error msg="StopPodSandbox for \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\" failed" error="failed to destroy network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.554890 kubelet[2441]: E1101 00:43:50.554830 2441 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:43:50.555000 kubelet[2441]: E1101 00:43:50.554909 2441 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415"} Nov 1 00:43:50.555000 kubelet[2441]: E1101 00:43:50.554951 2441 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c8835bb5-2375-444c-85bc-4149b7d50cd0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:43:50.555000 kubelet[2441]: E1101 00:43:50.554988 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c8835bb5-2375-444c-85bc-4149b7d50cd0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:43:50.580465 env[1431]: time="2025-11-01T00:43:50.580387531Z" level=error msg="Failed to destroy network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.580879 env[1431]: time="2025-11-01T00:43:50.580827436Z" level=error msg="encountered an error cleaning up failed sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.580988 env[1431]: time="2025-11-01T00:43:50.580909837Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56df8c5d4b-rfbnt,Uid:4c3c0e0e-07f0-4e99-8395-721e399f588a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.581173 kubelet[2441]: E1101 00:43:50.581133 2441 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.581265 kubelet[2441]: E1101 00:43:50.581202 2441 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" Nov 1 00:43:50.581265 kubelet[2441]: E1101 00:43:50.581234 2441 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" Nov 1 00:43:50.581355 kubelet[2441]: E1101 00:43:50.581299 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-56df8c5d4b-rfbnt_calico-apiserver(4c3c0e0e-07f0-4e99-8395-721e399f588a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-56df8c5d4b-rfbnt_calico-apiserver(4c3c0e0e-07f0-4e99-8395-721e399f588a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:43:50.603643 env[1431]: time="2025-11-01T00:43:50.603584371Z" level=error msg="StopPodSandbox for \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\" failed" error="failed to destroy network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.603854 kubelet[2441]: E1101 00:43:50.603809 2441 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:43:50.603944 kubelet[2441]: E1101 00:43:50.603873 2441 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5"} Nov 1 00:43:50.603944 kubelet[2441]: E1101 00:43:50.603920 2441 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ce526820-d1dc-4357-9fb7-1cb0ce632942\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:43:50.604065 kubelet[2441]: E1101 00:43:50.603949 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ce526820-d1dc-4357-9fb7-1cb0ce632942\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:43:50.606849 env[1431]: time="2025-11-01T00:43:50.606798604Z" level=error msg="Failed to destroy network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.607245 env[1431]: time="2025-11-01T00:43:50.607198708Z" level=error msg="encountered an error cleaning up failed sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.607333 env[1431]: time="2025-11-01T00:43:50.607270609Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-cpllc,Uid:31c65c5c-1a06-4110-b81b-98d3530e65c1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.607522 kubelet[2441]: E1101 00:43:50.607483 2441 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.607625 kubelet[2441]: E1101 00:43:50.607595 2441 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-cpllc" Nov 1 00:43:50.607686 kubelet[2441]: E1101 00:43:50.607637 2441 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-cpllc" Nov 1 00:43:50.607756 kubelet[2441]: E1101 00:43:50.607725 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-cpllc_calico-system(31c65c5c-1a06-4110-b81b-98d3530e65c1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-cpllc_calico-system(31c65c5c-1a06-4110-b81b-98d3530e65c1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:43:50.621297 env[1431]: time="2025-11-01T00:43:50.621259453Z" level=error msg="Failed to destroy network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.621639 env[1431]: time="2025-11-01T00:43:50.621600456Z" level=error msg="encountered an error cleaning up failed sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.621729 env[1431]: time="2025-11-01T00:43:50.621667357Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56df8c5d4b-65nv4,Uid:c4fa1769-b5ef-44fb-bb2e-c91531ca49da,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.622372 kubelet[2441]: E1101 00:43:50.621942 2441 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.622372 kubelet[2441]: E1101 00:43:50.621991 2441 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" Nov 1 00:43:50.622372 kubelet[2441]: E1101 00:43:50.622026 2441 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" Nov 1 00:43:50.622648 kubelet[2441]: E1101 00:43:50.622076 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-56df8c5d4b-65nv4_calico-apiserver(c4fa1769-b5ef-44fb-bb2e-c91531ca49da)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-56df8c5d4b-65nv4_calico-apiserver(c4fa1769-b5ef-44fb-bb2e-c91531ca49da)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:43:50.625273 env[1431]: time="2025-11-01T00:43:50.625231094Z" level=error msg="Failed to destroy network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.625589 env[1431]: time="2025-11-01T00:43:50.625530397Z" level=error msg="encountered an error cleaning up failed sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.625681 env[1431]: time="2025-11-01T00:43:50.625613998Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n8ngt,Uid:a1f1ab45-e8ff-47b7-b5f4-8707d57d8285,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.625846 kubelet[2441]: E1101 00:43:50.625800 2441 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:50.625935 kubelet[2441]: E1101 00:43:50.625863 2441 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-n8ngt" Nov 1 00:43:50.625935 kubelet[2441]: E1101 00:43:50.625901 2441 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-n8ngt" Nov 1 00:43:50.626042 kubelet[2441]: E1101 00:43:50.625959 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-n8ngt_kube-system(a1f1ab45-e8ff-47b7-b5f4-8707d57d8285)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-n8ngt_kube-system(a1f1ab45-e8ff-47b7-b5f4-8707d57d8285)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-n8ngt" podUID="a1f1ab45-e8ff-47b7-b5f4-8707d57d8285" Nov 1 00:43:51.403734 kubelet[2441]: I1101 00:43:51.403683 2441 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:43:51.404590 env[1431]: time="2025-11-01T00:43:51.404534066Z" level=info msg="StopPodSandbox for \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\"" Nov 1 00:43:51.407965 kubelet[2441]: I1101 00:43:51.407942 2441 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:43:51.408667 env[1431]: time="2025-11-01T00:43:51.408633107Z" level=info msg="StopPodSandbox for \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\"" Nov 1 00:43:51.413295 kubelet[2441]: I1101 00:43:51.413267 2441 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:43:51.415054 env[1431]: time="2025-11-01T00:43:51.415021172Z" level=info msg="StopPodSandbox for \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\"" Nov 1 00:43:51.417383 kubelet[2441]: I1101 00:43:51.417345 2441 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:43:51.418220 env[1431]: time="2025-11-01T00:43:51.418186204Z" level=info msg="StopPodSandbox for \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\"" Nov 1 00:43:51.501723 env[1431]: time="2025-11-01T00:43:51.501619351Z" level=error msg="StopPodSandbox for \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\" failed" error="failed to destroy network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:51.502374 kubelet[2441]: E1101 00:43:51.502165 2441 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:43:51.502374 kubelet[2441]: E1101 00:43:51.502231 2441 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf"} Nov 1 00:43:51.502374 kubelet[2441]: E1101 00:43:51.502289 2441 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4c3c0e0e-07f0-4e99-8395-721e399f588a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:43:51.502374 kubelet[2441]: E1101 00:43:51.502319 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4c3c0e0e-07f0-4e99-8395-721e399f588a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:43:51.523288 env[1431]: time="2025-11-01T00:43:51.523192970Z" level=error msg="StopPodSandbox for \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\" failed" error="failed to destroy network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:51.523925 kubelet[2441]: E1101 00:43:51.523696 2441 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:43:51.523925 kubelet[2441]: E1101 00:43:51.523760 2441 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9"} Nov 1 00:43:51.523925 kubelet[2441]: E1101 00:43:51.523809 2441 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"31c65c5c-1a06-4110-b81b-98d3530e65c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:43:51.523925 kubelet[2441]: E1101 00:43:51.523857 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"31c65c5c-1a06-4110-b81b-98d3530e65c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:43:51.533889 env[1431]: time="2025-11-01T00:43:51.533826278Z" level=error msg="StopPodSandbox for \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\" failed" error="failed to destroy network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:51.534342 kubelet[2441]: E1101 00:43:51.534169 2441 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:43:51.534342 kubelet[2441]: E1101 00:43:51.534225 2441 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6"} Nov 1 00:43:51.534342 kubelet[2441]: E1101 00:43:51.534264 2441 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a1f1ab45-e8ff-47b7-b5f4-8707d57d8285\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:43:51.534342 kubelet[2441]: E1101 00:43:51.534300 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a1f1ab45-e8ff-47b7-b5f4-8707d57d8285\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-n8ngt" podUID="a1f1ab45-e8ff-47b7-b5f4-8707d57d8285" Nov 1 00:43:51.542228 env[1431]: time="2025-11-01T00:43:51.542119462Z" level=error msg="StopPodSandbox for \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\" failed" error="failed to destroy network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:43:51.542447 kubelet[2441]: E1101 00:43:51.542409 2441 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:43:51.542572 kubelet[2441]: E1101 00:43:51.542455 2441 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a"} Nov 1 00:43:51.542572 kubelet[2441]: E1101 00:43:51.542492 2441 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c4fa1769-b5ef-44fb-bb2e-c91531ca49da\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:43:51.542572 kubelet[2441]: E1101 00:43:51.542521 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c4fa1769-b5ef-44fb-bb2e-c91531ca49da\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:43:55.977391 kubelet[2441]: I1101 00:43:55.976746 2441 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:43:56.072246 kernel: kauditd_printk_skb: 34 callbacks suppressed Nov 1 00:43:56.072400 kernel: audit: type=1325 audit(1761957836.054:989): table=filter:106 family=2 entries=21 op=nft_register_rule pid=3543 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:56.054000 audit[3543]: NETFILTER_CFG table=filter:106 family=2 entries=21 op=nft_register_rule pid=3543 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:56.054000 audit[3543]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc6d2c8290 a2=0 a3=7ffc6d2c827c items=0 ppid=2550 pid=3543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:56.100860 kernel: audit: type=1300 audit(1761957836.054:989): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc6d2c8290 a2=0 a3=7ffc6d2c827c items=0 ppid=2550 pid=3543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:56.054000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:56.125108 kernel: audit: type=1327 audit(1761957836.054:989): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:56.125207 kernel: audit: type=1325 audit(1761957836.076:990): table=nat:107 family=2 entries=19 op=nft_register_chain pid=3543 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:56.076000 audit[3543]: NETFILTER_CFG table=nat:107 family=2 entries=19 op=nft_register_chain pid=3543 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:43:56.147063 kernel: audit: type=1300 audit(1761957836.076:990): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc6d2c8290 a2=0 a3=7ffc6d2c827c items=0 ppid=2550 pid=3543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:56.076000 audit[3543]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc6d2c8290 a2=0 a3=7ffc6d2c827c items=0 ppid=2550 pid=3543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:56.076000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:56.160151 kernel: audit: type=1327 audit(1761957836.076:990): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:43:57.056660 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount505942930.mount: Deactivated successfully. Nov 1 00:43:57.093516 env[1431]: time="2025-11-01T00:43:57.093462736Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:57.100698 env[1431]: time="2025-11-01T00:43:57.100655802Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:57.104115 env[1431]: time="2025-11-01T00:43:57.104079134Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:57.106998 env[1431]: time="2025-11-01T00:43:57.106966460Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:43:57.107331 env[1431]: time="2025-11-01T00:43:57.107300563Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9\"" Nov 1 00:43:57.128947 env[1431]: time="2025-11-01T00:43:57.128911363Z" level=info msg="CreateContainer within sandbox \"f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:43:57.161249 env[1431]: time="2025-11-01T00:43:57.161210861Z" level=info msg="CreateContainer within sandbox \"f4673ecf4347b65018af455492b6bc9b071c3f3deac55b2c9c14a87201681e34\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591\"" Nov 1 00:43:57.163282 env[1431]: time="2025-11-01T00:43:57.161843467Z" level=info msg="StartContainer for \"5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591\"" Nov 1 00:43:57.195695 systemd[1]: Started cri-containerd-5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591.scope. Nov 1 00:43:57.224598 kernel: audit: type=1400 audit(1761957837.211:991): avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7faa8966f468 items=0 ppid=2935 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:57.247573 kernel: audit: type=1300 audit(1761957837.211:991): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7faa8966f468 items=0 ppid=2935 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:57.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563393565663561633632366164653865663533663231616433656161 Nov 1 00:43:57.267625 kernel: audit: type=1327 audit(1761957837.211:991): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563393565663561633632366164653865663533663231616433656161 Nov 1 00:43:57.267709 kernel: audit: type=1400 audit(1761957837.211:992): avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.211000 audit: BPF prog-id=137 op=LOAD Nov 1 00:43:57.211000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000341ee8 items=0 ppid=2935 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:57.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563393565663561633632366164653865663533663231616433656161 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit: BPF prog-id=138 op=LOAD Nov 1 00:43:57.224000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000341f38 items=0 ppid=2935 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:57.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563393565663561633632366164653865663533663231616433656161 Nov 1 00:43:57.224000 audit: BPF prog-id=138 op=UNLOAD Nov 1 00:43:57.224000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:57.224000 audit: BPF prog-id=139 op=LOAD Nov 1 00:43:57.224000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000341fc8 items=0 ppid=2935 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:57.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563393565663561633632366164653865663533663231616433656161 Nov 1 00:43:57.291001 env[1431]: time="2025-11-01T00:43:57.290948059Z" level=info msg="StartContainer for \"5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591\" returns successfully" Nov 1 00:43:57.644894 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:43:57.645012 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:43:57.770188 kubelet[2441]: I1101 00:43:57.770117 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-g8pht" podStartSLOduration=1.731169575 podStartE2EDuration="20.770093883s" podCreationTimestamp="2025-11-01 00:43:37 +0000 UTC" firstStartedPulling="2025-11-01 00:43:38.069293064 +0000 UTC m=+22.773320432" lastFinishedPulling="2025-11-01 00:43:57.108217372 +0000 UTC m=+41.812244740" observedRunningTime="2025-11-01 00:43:57.456119284 +0000 UTC m=+42.160146652" watchObservedRunningTime="2025-11-01 00:43:57.770093883 +0000 UTC m=+42.474121251" Nov 1 00:43:57.772337 env[1431]: time="2025-11-01T00:43:57.771845799Z" level=info msg="StopPodSandbox for \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\"" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.843 [INFO][3605] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.843 [INFO][3605] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" iface="eth0" netns="/var/run/netns/cni-a37cb7d9-6bf3-e13d-a73d-55d5c12019ee" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.843 [INFO][3605] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" iface="eth0" netns="/var/run/netns/cni-a37cb7d9-6bf3-e13d-a73d-55d5c12019ee" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.843 [INFO][3605] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" iface="eth0" netns="/var/run/netns/cni-a37cb7d9-6bf3-e13d-a73d-55d5c12019ee" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.843 [INFO][3605] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.843 [INFO][3605] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.874 [INFO][3613] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.874 [INFO][3613] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.874 [INFO][3613] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.879 [WARNING][3613] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.879 [INFO][3613] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.880 [INFO][3613] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:43:57.885717 env[1431]: 2025-11-01 00:43:57.883 [INFO][3605] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:43:57.887030 env[1431]: time="2025-11-01T00:43:57.886980862Z" level=info msg="TearDown network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\" successfully" Nov 1 00:43:57.887179 env[1431]: time="2025-11-01T00:43:57.887152463Z" level=info msg="StopPodSandbox for \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\" returns successfully" Nov 1 00:43:57.970129 kubelet[2441]: I1101 00:43:57.968867 2441 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9gg65\" (UniqueName: \"kubernetes.io/projected/c915da59-bb95-407a-9154-f5c2aba07ef1-kube-api-access-9gg65\") pod \"c915da59-bb95-407a-9154-f5c2aba07ef1\" (UID: \"c915da59-bb95-407a-9154-f5c2aba07ef1\") " Nov 1 00:43:57.970129 kubelet[2441]: I1101 00:43:57.968924 2441 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c915da59-bb95-407a-9154-f5c2aba07ef1-whisker-ca-bundle\") pod \"c915da59-bb95-407a-9154-f5c2aba07ef1\" (UID: \"c915da59-bb95-407a-9154-f5c2aba07ef1\") " Nov 1 00:43:57.970129 kubelet[2441]: I1101 00:43:57.968948 2441 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c915da59-bb95-407a-9154-f5c2aba07ef1-whisker-backend-key-pair\") pod \"c915da59-bb95-407a-9154-f5c2aba07ef1\" (UID: \"c915da59-bb95-407a-9154-f5c2aba07ef1\") " Nov 1 00:43:57.970129 kubelet[2441]: I1101 00:43:57.970063 2441 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c915da59-bb95-407a-9154-f5c2aba07ef1-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "c915da59-bb95-407a-9154-f5c2aba07ef1" (UID: "c915da59-bb95-407a-9154-f5c2aba07ef1"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:43:57.975251 kubelet[2441]: I1101 00:43:57.975186 2441 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c915da59-bb95-407a-9154-f5c2aba07ef1-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "c915da59-bb95-407a-9154-f5c2aba07ef1" (UID: "c915da59-bb95-407a-9154-f5c2aba07ef1"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:43:57.975387 kubelet[2441]: I1101 00:43:57.975332 2441 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c915da59-bb95-407a-9154-f5c2aba07ef1-kube-api-access-9gg65" (OuterVolumeSpecName: "kube-api-access-9gg65") pod "c915da59-bb95-407a-9154-f5c2aba07ef1" (UID: "c915da59-bb95-407a-9154-f5c2aba07ef1"). InnerVolumeSpecName "kube-api-access-9gg65". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:43:58.056326 systemd[1]: run-netns-cni\x2da37cb7d9\x2d6bf3\x2de13d\x2da73d\x2d55d5c12019ee.mount: Deactivated successfully. Nov 1 00:43:58.056445 systemd[1]: var-lib-kubelet-pods-c915da59\x2dbb95\x2d407a\x2d9154\x2df5c2aba07ef1-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9gg65.mount: Deactivated successfully. Nov 1 00:43:58.056528 systemd[1]: var-lib-kubelet-pods-c915da59\x2dbb95\x2d407a\x2d9154\x2df5c2aba07ef1-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:43:58.069654 kubelet[2441]: I1101 00:43:58.069608 2441 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c915da59-bb95-407a-9154-f5c2aba07ef1-whisker-ca-bundle\") on node \"ci-3510.3.8-n-9f29a8c334\" DevicePath \"\"" Nov 1 00:43:58.069654 kubelet[2441]: I1101 00:43:58.069651 2441 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c915da59-bb95-407a-9154-f5c2aba07ef1-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-9f29a8c334\" DevicePath \"\"" Nov 1 00:43:58.069869 kubelet[2441]: I1101 00:43:58.069665 2441 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-9gg65\" (UniqueName: \"kubernetes.io/projected/c915da59-bb95-407a-9154-f5c2aba07ef1-kube-api-access-9gg65\") on node \"ci-3510.3.8-n-9f29a8c334\" DevicePath \"\"" Nov 1 00:43:58.242124 systemd[1]: Removed slice kubepods-besteffort-podc915da59_bb95_407a_9154_f5c2aba07ef1.slice. Nov 1 00:43:58.503578 systemd[1]: Created slice kubepods-besteffort-pod114fdca3_3bbe_4894_af68_80fba407dd24.slice. Nov 1 00:43:58.573481 kubelet[2441]: I1101 00:43:58.573357 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/114fdca3-3bbe-4894-af68-80fba407dd24-whisker-backend-key-pair\") pod \"whisker-5b6fd5995d-bq9rw\" (UID: \"114fdca3-3bbe-4894-af68-80fba407dd24\") " pod="calico-system/whisker-5b6fd5995d-bq9rw" Nov 1 00:43:58.573896 kubelet[2441]: I1101 00:43:58.573500 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kq5hc\" (UniqueName: \"kubernetes.io/projected/114fdca3-3bbe-4894-af68-80fba407dd24-kube-api-access-kq5hc\") pod \"whisker-5b6fd5995d-bq9rw\" (UID: \"114fdca3-3bbe-4894-af68-80fba407dd24\") " pod="calico-system/whisker-5b6fd5995d-bq9rw" Nov 1 00:43:58.573896 kubelet[2441]: I1101 00:43:58.573678 2441 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/114fdca3-3bbe-4894-af68-80fba407dd24-whisker-ca-bundle\") pod \"whisker-5b6fd5995d-bq9rw\" (UID: \"114fdca3-3bbe-4894-af68-80fba407dd24\") " pod="calico-system/whisker-5b6fd5995d-bq9rw" Nov 1 00:43:58.810922 env[1431]: time="2025-11-01T00:43:58.810735980Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5b6fd5995d-bq9rw,Uid:114fdca3-3bbe-4894-af68-80fba407dd24,Namespace:calico-system,Attempt:0,}" Nov 1 00:43:58.965461 systemd-networkd[1585]: calif8b9ba48656: Link UP Nov 1 00:43:58.971254 systemd-networkd[1585]: calif8b9ba48656: Gained carrier Nov 1 00:43:58.971582 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif8b9ba48656: link becomes ready Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.873 [INFO][3636] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.884 [INFO][3636] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0 whisker-5b6fd5995d- calico-system 114fdca3-3bbe-4894-af68-80fba407dd24 903 0 2025-11-01 00:43:58 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5b6fd5995d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-9f29a8c334 whisker-5b6fd5995d-bq9rw eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calif8b9ba48656 [] [] }} ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Namespace="calico-system" Pod="whisker-5b6fd5995d-bq9rw" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.884 [INFO][3636] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Namespace="calico-system" Pod="whisker-5b6fd5995d-bq9rw" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.908 [INFO][3649] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" HandleID="k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.908 [INFO][3649] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" HandleID="k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-9f29a8c334", "pod":"whisker-5b6fd5995d-bq9rw", "timestamp":"2025-11-01 00:43:58.908362968 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9f29a8c334", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.908 [INFO][3649] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.908 [INFO][3649] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.908 [INFO][3649] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9f29a8c334' Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.915 [INFO][3649] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.918 [INFO][3649] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.922 [INFO][3649] ipam/ipam.go 511: Trying affinity for 192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.923 [INFO][3649] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.925 [INFO][3649] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.925 [INFO][3649] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.120.128/26 handle="k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.926 [INFO][3649] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20 Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.933 [INFO][3649] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.120.128/26 handle="k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.938 [INFO][3649] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.120.129/26] block=192.168.120.128/26 handle="k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.938 [INFO][3649] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.129/26] handle="k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.938 [INFO][3649] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:43:58.988735 env[1431]: 2025-11-01 00:43:58.938 [INFO][3649] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.120.129/26] IPv6=[] ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" HandleID="k8s-pod-network.7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" Nov 1 00:43:58.989498 env[1431]: 2025-11-01 00:43:58.940 [INFO][3636] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Namespace="calico-system" Pod="whisker-5b6fd5995d-bq9rw" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0", GenerateName:"whisker-5b6fd5995d-", Namespace:"calico-system", SelfLink:"", UID:"114fdca3-3bbe-4894-af68-80fba407dd24", ResourceVersion:"903", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5b6fd5995d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"", Pod:"whisker-5b6fd5995d-bq9rw", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.120.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calif8b9ba48656", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:43:58.989498 env[1431]: 2025-11-01 00:43:58.940 [INFO][3636] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.129/32] ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Namespace="calico-system" Pod="whisker-5b6fd5995d-bq9rw" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" Nov 1 00:43:58.989498 env[1431]: 2025-11-01 00:43:58.940 [INFO][3636] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif8b9ba48656 ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Namespace="calico-system" Pod="whisker-5b6fd5995d-bq9rw" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" Nov 1 00:43:58.989498 env[1431]: 2025-11-01 00:43:58.971 [INFO][3636] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Namespace="calico-system" Pod="whisker-5b6fd5995d-bq9rw" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" Nov 1 00:43:58.989498 env[1431]: 2025-11-01 00:43:58.972 [INFO][3636] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Namespace="calico-system" Pod="whisker-5b6fd5995d-bq9rw" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0", GenerateName:"whisker-5b6fd5995d-", Namespace:"calico-system", SelfLink:"", UID:"114fdca3-3bbe-4894-af68-80fba407dd24", ResourceVersion:"903", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5b6fd5995d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20", Pod:"whisker-5b6fd5995d-bq9rw", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.120.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calif8b9ba48656", MAC:"ae:71:cf:3f:47:0a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:43:58.989498 env[1431]: 2025-11-01 00:43:58.987 [INFO][3636] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20" Namespace="calico-system" Pod="whisker-5b6fd5995d-bq9rw" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--5b6fd5995d--bq9rw-eth0" Nov 1 00:43:59.028436 env[1431]: time="2025-11-01T00:43:59.028247255Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:43:59.028436 env[1431]: time="2025-11-01T00:43:59.028293655Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:43:59.028436 env[1431]: time="2025-11-01T00:43:59.028308755Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:43:59.029616 env[1431]: time="2025-11-01T00:43:59.028778859Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20 pid=3682 runtime=io.containerd.runc.v2 Nov 1 00:43:59.030000 audit[3693]: AVC avc: denied { write } for pid=3693 comm="tee" name="fd" dev="proc" ino=30886 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:43:59.030000 audit[3693]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd376447d1 a2=241 a3=1b6 items=1 ppid=3671 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.030000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:43:59.030000 audit: PATH item=0 name="/dev/fd/63" inode=30881 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:43:59.030000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:43:59.048641 systemd[1]: Started cri-containerd-7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20.scope. Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.094000 audit: BPF prog-id=140 op=LOAD Nov 1 00:43:59.095000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.095000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3682 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763643539306231653138646238393535646138646437376166303130 Nov 1 00:43:59.095000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.095000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3682 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763643539306231653138646238393535646138646437376166303130 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.096000 audit: BPF prog-id=141 op=LOAD Nov 1 00:43:59.096000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000319040 items=0 ppid=3682 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763643539306231653138646238393535646138646437376166303130 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.098000 audit: BPF prog-id=142 op=LOAD Nov 1 00:43:59.098000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000319088 items=0 ppid=3682 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763643539306231653138646238393535646138646437376166303130 Nov 1 00:43:59.099000 audit: BPF prog-id=142 op=UNLOAD Nov 1 00:43:59.099000 audit: BPF prog-id=141 op=UNLOAD Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.099000 audit: BPF prog-id=143 op=LOAD Nov 1 00:43:59.099000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000319498 items=0 ppid=3682 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763643539306231653138646238393535646138646437376166303130 Nov 1 00:43:59.145000 audit[3742]: AVC avc: denied { write } for pid=3742 comm="tee" name="fd" dev="proc" ino=30005 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:43:59.145000 audit[3742]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc6f5777bf a2=241 a3=1b6 items=1 ppid=3672 pid=3742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.145000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:43:59.145000 audit: PATH item=0 name="/dev/fd/63" inode=30946 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:43:59.145000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:43:59.149000 audit[3756]: AVC avc: denied { write } for pid=3756 comm="tee" name="fd" dev="proc" ino=30009 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:43:59.149000 audit[3756]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe24a4c7cf a2=241 a3=1b6 items=1 ppid=3710 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.149000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:43:59.149000 audit: PATH item=0 name="/dev/fd/63" inode=30964 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:43:59.149000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:43:59.158711 env[1431]: time="2025-11-01T00:43:59.158669124Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5b6fd5995d-bq9rw,Uid:114fdca3-3bbe-4894-af68-80fba407dd24,Namespace:calico-system,Attempt:0,} returns sandbox id \"7cd590b1e18db8955da8dd77af010d03a6f6248163ab087fb5e8e174175f3d20\"" Nov 1 00:43:59.163242 env[1431]: time="2025-11-01T00:43:59.163208865Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:43:59.179000 audit[3768]: AVC avc: denied { write } for pid=3768 comm="tee" name="fd" dev="proc" ino=30018 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:43:59.182000 audit[3749]: AVC avc: denied { write } for pid=3749 comm="tee" name="fd" dev="proc" ino=30982 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:43:59.182000 audit[3749]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcf1a037cf a2=241 a3=1b6 items=1 ppid=3699 pid=3749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.182000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:43:59.182000 audit: PATH item=0 name="/dev/fd/63" inode=30961 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:43:59.182000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:43:59.179000 audit[3768]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffffbf887c0 a2=241 a3=1b6 items=1 ppid=3685 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.179000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:43:59.179000 audit: PATH item=0 name="/dev/fd/63" inode=30970 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:43:59.179000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:43:59.186000 audit[3773]: AVC avc: denied { write } for pid=3773 comm="tee" name="fd" dev="proc" ino=30022 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:43:59.186000 audit[3773]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff895257cf a2=241 a3=1b6 items=1 ppid=3720 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.186000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:43:59.186000 audit: PATH item=0 name="/dev/fd/63" inode=30015 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:43:59.186000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:43:59.194000 audit[3771]: AVC avc: denied { write } for pid=3771 comm="tee" name="fd" dev="proc" ino=30024 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:43:59.194000 audit[3771]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcf50867d0 a2=241 a3=1b6 items=1 ppid=3706 pid=3771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.194000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:43:59.194000 audit: PATH item=0 name="/dev/fd/63" inode=30978 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:43:59.194000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:43:59.422997 env[1431]: time="2025-11-01T00:43:59.422870792Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:43:59.426630 env[1431]: time="2025-11-01T00:43:59.426490125Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:43:59.427229 kubelet[2441]: E1101 00:43:59.426894 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:43:59.427229 kubelet[2441]: E1101 00:43:59.426958 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:43:59.427730 kubelet[2441]: E1101 00:43:59.427154 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:5fe78d67b676468e944c4add0cb5e7ce,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-kq5hc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5b6fd5995d-bq9rw_calico-system(114fdca3-3bbe-4894-af68-80fba407dd24): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:43:59.429366 env[1431]: time="2025-11-01T00:43:59.429334750Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.436000 audit: BPF prog-id=144 op=LOAD Nov 1 00:43:59.436000 audit[3810]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffec302b610 a2=98 a3=1fffffffffffffff items=0 ppid=3721 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.436000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:43:59.439000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.439000 audit: BPF prog-id=145 op=LOAD Nov 1 00:43:59.439000 audit[3810]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffec302b4f0 a2=94 a3=3 items=0 ppid=3721 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.439000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:43:59.440000 audit: BPF prog-id=145 op=UNLOAD Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit[3810]: AVC avc: denied { bpf } for pid=3810 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.440000 audit: BPF prog-id=146 op=LOAD Nov 1 00:43:59.440000 audit[3810]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffec302b530 a2=94 a3=7ffec302b710 items=0 ppid=3721 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.440000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:43:59.441000 audit: BPF prog-id=146 op=UNLOAD Nov 1 00:43:59.441000 audit[3810]: AVC avc: denied { perfmon } for pid=3810 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.441000 audit[3810]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffec302b600 a2=50 a3=a000000085 items=0 ppid=3721 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.441000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.446000 audit: BPF prog-id=147 op=LOAD Nov 1 00:43:59.446000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdb7348890 a2=98 a3=3 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.446000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.447000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.447000 audit: BPF prog-id=148 op=LOAD Nov 1 00:43:59.447000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdb7348680 a2=94 a3=54428f items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.447000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.448000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.448000 audit: BPF prog-id=149 op=LOAD Nov 1 00:43:59.448000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdb73486b0 a2=94 a3=2 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.448000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.449000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit: BPF prog-id=150 op=LOAD Nov 1 00:43:59.588000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdb7348570 a2=94 a3=1 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.588000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.588000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:43:59.588000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.588000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdb7348640 a2=50 a3=7ffdb7348720 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.588000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb7348580 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb73485b0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb73484c0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb73485d0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb73485b0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb73485a0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb73485d0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb73485b0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb73485d0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb73485a0 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb7348610 a2=28 a3=0 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdb73483c0 a2=50 a3=1 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit: BPF prog-id=151 op=LOAD Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdb73483c0 a2=94 a3=5 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdb7348470 a2=50 a3=1 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.598000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.598000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdb7348590 a2=4 a3=38 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { confidentiality } for pid=3814 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:43:59.599000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb73485e0 a2=94 a3=6 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { confidentiality } for pid=3814 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:43:59.599000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb7347d90 a2=94 a3=88 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.599000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb7347d90 a2=94 a3=88 items=0 ppid=3721 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit: BPF prog-id=152 op=LOAD Nov 1 00:43:59.609000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffece389f30 a2=98 a3=1999999999999999 items=0 ppid=3721 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.609000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:43:59.609000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit: BPF prog-id=153 op=LOAD Nov 1 00:43:59.609000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffece389e10 a2=94 a3=ffff items=0 ppid=3721 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.609000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:43:59.609000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.609000 audit: BPF prog-id=154 op=LOAD Nov 1 00:43:59.609000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffece389e50 a2=94 a3=7ffece38a030 items=0 ppid=3721 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.609000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:43:59.609000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:43:59.697668 env[1431]: time="2025-11-01T00:43:59.697617855Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:43:59.700480 env[1431]: time="2025-11-01T00:43:59.700420680Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:43:59.700720 kubelet[2441]: E1101 00:43:59.700679 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:43:59.700825 kubelet[2441]: E1101 00:43:59.700736 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:43:59.700956 kubelet[2441]: E1101 00:43:59.700901 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kq5hc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5b6fd5995d-bq9rw_calico-system(114fdca3-3bbe-4894-af68-80fba407dd24): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:43:59.702374 kubelet[2441]: E1101 00:43:59.702328 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:43:59.735678 systemd-networkd[1585]: vxlan.calico: Link UP Nov 1 00:43:59.735687 systemd-networkd[1585]: vxlan.calico: Gained carrier Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit: BPF prog-id=155 op=LOAD Nov 1 00:43:59.757000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2fc2e920 a2=98 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.757000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.757000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit: BPF prog-id=156 op=LOAD Nov 1 00:43:59.757000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2fc2e730 a2=94 a3=54428f items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.757000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.757000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit: BPF prog-id=157 op=LOAD Nov 1 00:43:59.757000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2fc2e760 a2=94 a3=2 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.757000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.757000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2fc2e630 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.757000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2fc2e660 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.757000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.757000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.757000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2fc2e570 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.757000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2fc2e680 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2fc2e660 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2fc2e650 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2fc2e680 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2fc2e660 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2fc2e680 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2fc2e650 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2fc2e6c0 a2=28 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.758000 audit: BPF prog-id=158 op=LOAD Nov 1 00:43:59.758000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff2fc2e530 a2=94 a3=0 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.758000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.758000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff2fc2e520 a2=50 a3=2800 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.759000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff2fc2e520 a2=50 a3=2800 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.759000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit: BPF prog-id=159 op=LOAD Nov 1 00:43:59.759000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff2fc2dd40 a2=94 a3=2 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.759000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.759000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { perfmon } for pid=3846 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit[3846]: AVC avc: denied { bpf } for pid=3846 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.759000 audit: BPF prog-id=160 op=LOAD Nov 1 00:43:59.759000 audit[3846]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff2fc2de40 a2=94 a3=30 items=0 ppid=3721 pid=3846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.759000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit: BPF prog-id=161 op=LOAD Nov 1 00:43:59.763000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe7aa1e120 a2=98 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.763000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.763000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit: BPF prog-id=162 op=LOAD Nov 1 00:43:59.763000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe7aa1df10 a2=94 a3=54428f items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.763000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.763000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.763000 audit: BPF prog-id=163 op=LOAD Nov 1 00:43:59.763000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe7aa1df40 a2=94 a3=2 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.763000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.763000 audit: BPF prog-id=163 op=UNLOAD Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit: BPF prog-id=164 op=LOAD Nov 1 00:43:59.898000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe7aa1de00 a2=94 a3=1 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.898000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.898000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:43:59.898000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.898000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe7aa1ded0 a2=50 a3=7ffe7aa1dfb0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.898000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe7aa1de10 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe7aa1de40 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe7aa1dd50 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe7aa1de60 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe7aa1de40 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe7aa1de30 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe7aa1de60 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe7aa1de40 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe7aa1de60 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe7aa1de30 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe7aa1dea0 a2=28 a3=0 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe7aa1dc50 a2=50 a3=1 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit: BPF prog-id=165 op=LOAD Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe7aa1dc50 a2=94 a3=5 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit: BPF prog-id=165 op=UNLOAD Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe7aa1dd00 a2=50 a3=1 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe7aa1de20 a2=4 a3=38 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.908000 audit[3848]: AVC avc: denied { confidentiality } for pid=3848 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:43:59.908000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe7aa1de70 a2=94 a3=6 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.908000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { confidentiality } for pid=3848 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:43:59.909000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe7aa1d620 a2=94 a3=88 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.909000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.909000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe7aa1d620 a2=94 a3=88 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.909000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.910000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.910000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe7aa1f050 a2=10 a3=f8f00800 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.910000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.910000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.910000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe7aa1eef0 a2=10 a3=3 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.910000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.910000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.910000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe7aa1ee90 a2=10 a3=3 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.910000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.910000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:43:59.910000 audit[3848]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe7aa1ee90 a2=10 a3=7 items=0 ppid=3721 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:43:59.910000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:43:59.918000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:43:59.976513 kubelet[2441]: I1101 00:43:59.975936 2441 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:44:00.006224 systemd[1]: run-containerd-runc-k8s.io-5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591-runc.P8h4K4.mount: Deactivated successfully. Nov 1 00:44:00.090000 audit[3895]: NETFILTER_CFG table=mangle:108 family=2 entries=16 op=nft_register_chain pid=3895 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:00.090000 audit[3895]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff5ea472e0 a2=0 a3=7fff5ea472cc items=0 ppid=3721 pid=3895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:00.090000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:00.110000 audit[3894]: NETFILTER_CFG table=nat:109 family=2 entries=15 op=nft_register_chain pid=3894 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:00.110000 audit[3894]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff2abfc790 a2=0 a3=7fff2abfc77c items=0 ppid=3721 pid=3894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:00.110000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:00.125181 systemd[1]: run-containerd-runc-k8s.io-5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591-runc.BMGQOi.mount: Deactivated successfully. Nov 1 00:44:00.166000 audit[3893]: NETFILTER_CFG table=raw:110 family=2 entries=21 op=nft_register_chain pid=3893 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:00.166000 audit[3893]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffc308b9580 a2=0 a3=7ffc308b956c items=0 ppid=3721 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:00.166000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:00.167000 audit[3898]: NETFILTER_CFG table=filter:111 family=2 entries=94 op=nft_register_chain pid=3898 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:00.167000 audit[3898]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffdf21a8140 a2=0 a3=5582ad41f000 items=0 ppid=3721 pid=3898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:00.167000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:00.238369 kubelet[2441]: I1101 00:44:00.237835 2441 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="c915da59-bb95-407a-9154-f5c2aba07ef1" path="/var/lib/kubelet/pods/c915da59-bb95-407a-9154-f5c2aba07ef1/volumes" Nov 1 00:44:00.441497 kubelet[2441]: E1101 00:44:00.441432 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:44:00.477000 audit[3938]: NETFILTER_CFG table=filter:112 family=2 entries=20 op=nft_register_rule pid=3938 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:00.477000 audit[3938]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc8e2e9410 a2=0 a3=7ffc8e2e93fc items=0 ppid=2550 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:00.477000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:00.480000 audit[3938]: NETFILTER_CFG table=nat:113 family=2 entries=14 op=nft_register_rule pid=3938 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:00.480000 audit[3938]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc8e2e9410 a2=0 a3=0 items=0 ppid=2550 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:00.480000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:00.759808 systemd-networkd[1585]: calif8b9ba48656: Gained IPv6LL Nov 1 00:44:01.079697 systemd-networkd[1585]: vxlan.calico: Gained IPv6LL Nov 1 00:44:01.236289 env[1431]: time="2025-11-01T00:44:01.236230160Z" level=info msg="StopPodSandbox for \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\"" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.280 [INFO][3950] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.280 [INFO][3950] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" iface="eth0" netns="/var/run/netns/cni-ecaa54b1-3358-8fcd-0283-b1ba55fc7be7" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.280 [INFO][3950] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" iface="eth0" netns="/var/run/netns/cni-ecaa54b1-3358-8fcd-0283-b1ba55fc7be7" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.281 [INFO][3950] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" iface="eth0" netns="/var/run/netns/cni-ecaa54b1-3358-8fcd-0283-b1ba55fc7be7" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.281 [INFO][3950] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.281 [INFO][3950] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.304 [INFO][3958] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.304 [INFO][3958] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.305 [INFO][3958] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.310 [WARNING][3958] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.310 [INFO][3958] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.312 [INFO][3958] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:01.314274 env[1431]: 2025-11-01 00:44:01.313 [INFO][3950] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:01.319437 env[1431]: time="2025-11-01T00:44:01.314443642Z" level=info msg="TearDown network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\" successfully" Nov 1 00:44:01.319437 env[1431]: time="2025-11-01T00:44:01.314483542Z" level=info msg="StopPodSandbox for \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\" returns successfully" Nov 1 00:44:01.319437 env[1431]: time="2025-11-01T00:44:01.319333584Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-jfx7f,Uid:687a4ecc-224e-4643-b429-c02add92af85,Namespace:kube-system,Attempt:1,}" Nov 1 00:44:01.317543 systemd[1]: run-netns-cni\x2decaa54b1\x2d3358\x2d8fcd\x2d0283\x2db1ba55fc7be7.mount: Deactivated successfully. Nov 1 00:44:01.453487 systemd-networkd[1585]: cali0beb186813a: Link UP Nov 1 00:44:01.464839 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:44:01.464953 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0beb186813a: link becomes ready Nov 1 00:44:01.465390 systemd-networkd[1585]: cali0beb186813a: Gained carrier Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.390 [INFO][3964] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0 coredns-674b8bbfcf- kube-system 687a4ecc-224e-4643-b429-c02add92af85 928 0 2025-11-01 00:43:22 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-9f29a8c334 coredns-674b8bbfcf-jfx7f eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali0beb186813a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Namespace="kube-system" Pod="coredns-674b8bbfcf-jfx7f" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.390 [INFO][3964] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Namespace="kube-system" Pod="coredns-674b8bbfcf-jfx7f" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.414 [INFO][3977] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" HandleID="k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.414 [INFO][3977] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" HandleID="k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4fd0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-9f29a8c334", "pod":"coredns-674b8bbfcf-jfx7f", "timestamp":"2025-11-01 00:44:01.414444013 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9f29a8c334", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.415 [INFO][3977] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.415 [INFO][3977] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.415 [INFO][3977] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9f29a8c334' Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.422 [INFO][3977] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.426 [INFO][3977] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.430 [INFO][3977] ipam/ipam.go 511: Trying affinity for 192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.432 [INFO][3977] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.434 [INFO][3977] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.434 [INFO][3977] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.120.128/26 handle="k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.435 [INFO][3977] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83 Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.443 [INFO][3977] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.120.128/26 handle="k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.448 [INFO][3977] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.120.130/26] block=192.168.120.128/26 handle="k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.448 [INFO][3977] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.130/26] handle="k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.448 [INFO][3977] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:01.485828 env[1431]: 2025-11-01 00:44:01.448 [INFO][3977] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.120.130/26] IPv6=[] ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" HandleID="k8s-pod-network.632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.486828 env[1431]: 2025-11-01 00:44:01.450 [INFO][3964] cni-plugin/k8s.go 418: Populated endpoint ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Namespace="kube-system" Pod="coredns-674b8bbfcf-jfx7f" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"687a4ecc-224e-4643-b429-c02add92af85", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"", Pod:"coredns-674b8bbfcf-jfx7f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0beb186813a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:01.486828 env[1431]: 2025-11-01 00:44:01.451 [INFO][3964] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.130/32] ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Namespace="kube-system" Pod="coredns-674b8bbfcf-jfx7f" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.486828 env[1431]: 2025-11-01 00:44:01.451 [INFO][3964] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0beb186813a ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Namespace="kube-system" Pod="coredns-674b8bbfcf-jfx7f" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.486828 env[1431]: 2025-11-01 00:44:01.466 [INFO][3964] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Namespace="kube-system" Pod="coredns-674b8bbfcf-jfx7f" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.486828 env[1431]: 2025-11-01 00:44:01.467 [INFO][3964] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Namespace="kube-system" Pod="coredns-674b8bbfcf-jfx7f" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"687a4ecc-224e-4643-b429-c02add92af85", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83", Pod:"coredns-674b8bbfcf-jfx7f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0beb186813a", MAC:"66:55:d7:68:cd:d9", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:01.486828 env[1431]: 2025-11-01 00:44:01.482 [INFO][3964] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83" Namespace="kube-system" Pod="coredns-674b8bbfcf-jfx7f" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:01.508000 audit[3993]: NETFILTER_CFG table=filter:114 family=2 entries=42 op=nft_register_chain pid=3993 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:01.515541 kernel: kauditd_printk_skb: 671 callbacks suppressed Nov 1 00:44:01.515638 kernel: audit: type=1325 audit(1761957841.508:1126): table=filter:114 family=2 entries=42 op=nft_register_chain pid=3993 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:01.508000 audit[3993]: SYSCALL arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7ffddeb3d650 a2=0 a3=7ffddeb3d63c items=0 ppid=3721 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.557574 kernel: audit: type=1300 audit(1761957841.508:1126): arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7ffddeb3d650 a2=0 a3=7ffddeb3d63c items=0 ppid=3721 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.560620 env[1431]: time="2025-11-01T00:44:01.560062182Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:44:01.560620 env[1431]: time="2025-11-01T00:44:01.560105382Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:44:01.560620 env[1431]: time="2025-11-01T00:44:01.560119182Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:44:01.560620 env[1431]: time="2025-11-01T00:44:01.560288984Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83 pid=3999 runtime=io.containerd.runc.v2 Nov 1 00:44:01.508000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:01.579572 kernel: audit: type=1327 audit(1761957841.508:1126): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:01.600718 systemd[1]: Started cri-containerd-632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83.scope. Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.689185 kernel: audit: type=1400 audit(1761957841.674:1127): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.713780 kernel: audit: type=1400 audit(1761957841.674:1128): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.713881 kernel: audit: type=1400 audit(1761957841.674:1129): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.744518 kernel: audit: type=1400 audit(1761957841.674:1130): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.744669 kernel: audit: type=1400 audit(1761957841.674:1131): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.758572 kernel: audit: type=1400 audit(1761957841.674:1132): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.773573 kernel: audit: type=1400 audit(1761957841.674:1133): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.674000 audit: BPF prog-id=166 op=LOAD Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3999 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633326234633731343338636537653364353831313239303030646538 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3999 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633326234633731343338636537653364353831313239303030646538 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit: BPF prog-id=167 op=LOAD Nov 1 00:44:01.688000 audit[4007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000234270 items=0 ppid=3999 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633326234633731343338636537653364353831313239303030646538 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit: BPF prog-id=168 op=LOAD Nov 1 00:44:01.688000 audit[4007]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002342b8 items=0 ppid=3999 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633326234633731343338636537653364353831313239303030646538 Nov 1 00:44:01.688000 audit: BPF prog-id=168 op=UNLOAD Nov 1 00:44:01.688000 audit: BPF prog-id=167 op=UNLOAD Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { perfmon } for pid=4007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit[4007]: AVC avc: denied { bpf } for pid=4007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.688000 audit: BPF prog-id=169 op=LOAD Nov 1 00:44:01.688000 audit[4007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002346c8 items=0 ppid=3999 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633326234633731343338636537653364353831313239303030646538 Nov 1 00:44:01.781098 env[1431]: time="2025-11-01T00:44:01.779815096Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-jfx7f,Uid:687a4ecc-224e-4643-b429-c02add92af85,Namespace:kube-system,Attempt:1,} returns sandbox id \"632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83\"" Nov 1 00:44:01.790130 env[1431]: time="2025-11-01T00:44:01.790095586Z" level=info msg="CreateContainer within sandbox \"632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:44:01.817433 env[1431]: time="2025-11-01T00:44:01.817398024Z" level=info msg="CreateContainer within sandbox \"632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1fe0d89f0d4271072f929616d1cd89a9e9bfbbb5f708afc5896cb010463f633b\"" Nov 1 00:44:01.819688 env[1431]: time="2025-11-01T00:44:01.818141830Z" level=info msg="StartContainer for \"1fe0d89f0d4271072f929616d1cd89a9e9bfbbb5f708afc5896cb010463f633b\"" Nov 1 00:44:01.835341 systemd[1]: Started cri-containerd-1fe0d89f0d4271072f929616d1cd89a9e9bfbbb5f708afc5896cb010463f633b.scope. Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.849000 audit: BPF prog-id=170 op=LOAD Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3999 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653064383966306434323731303732663932393631366431636438 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3999 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653064383966306434323731303732663932393631366431636438 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit: BPF prog-id=171 op=LOAD Nov 1 00:44:01.850000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000099880 items=0 ppid=3999 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653064383966306434323731303732663932393631366431636438 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit: BPF prog-id=172 op=LOAD Nov 1 00:44:01.850000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000998c8 items=0 ppid=3999 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653064383966306434323731303732663932393631366431636438 Nov 1 00:44:01.850000 audit: BPF prog-id=172 op=UNLOAD Nov 1 00:44:01.850000 audit: BPF prog-id=171 op=UNLOAD Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:01.850000 audit: BPF prog-id=173 op=LOAD Nov 1 00:44:01.850000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000099cd8 items=0 ppid=3999 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:01.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653064383966306434323731303732663932393631366431636438 Nov 1 00:44:01.870450 env[1431]: time="2025-11-01T00:44:01.870407585Z" level=info msg="StartContainer for \"1fe0d89f0d4271072f929616d1cd89a9e9bfbbb5f708afc5896cb010463f633b\" returns successfully" Nov 1 00:44:01.879000 audit[4052]: AVC avc: denied { getattr } for pid=4052 comm="coredns" path="cgroup:[4026532670]" dev="nsfs" ino=4026532670 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c227 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:44:01.879000 audit[4052]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a8b8 a2=c0004a17c8 a3=0 items=0 ppid=3999 pid=4052 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c227 key=(null) Nov 1 00:44:01.879000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:44:02.238101 env[1431]: time="2025-11-01T00:44:02.238038260Z" level=info msg="StopPodSandbox for \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\"" Nov 1 00:44:02.239758 env[1431]: time="2025-11-01T00:44:02.238741066Z" level=info msg="StopPodSandbox for \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\"" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.315 [INFO][4088] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.315 [INFO][4088] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" iface="eth0" netns="/var/run/netns/cni-d94adef7-f437-2a0f-ce86-8ae4c44c6c7f" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.315 [INFO][4088] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" iface="eth0" netns="/var/run/netns/cni-d94adef7-f437-2a0f-ce86-8ae4c44c6c7f" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.315 [INFO][4088] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" iface="eth0" netns="/var/run/netns/cni-d94adef7-f437-2a0f-ce86-8ae4c44c6c7f" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.315 [INFO][4088] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.315 [INFO][4088] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.349 [INFO][4110] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.349 [INFO][4110] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.350 [INFO][4110] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.357 [WARNING][4110] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.357 [INFO][4110] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.358 [INFO][4110] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:02.362148 env[1431]: 2025-11-01 00:44:02.360 [INFO][4088] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:02.363225 env[1431]: time="2025-11-01T00:44:02.363165535Z" level=info msg="TearDown network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\" successfully" Nov 1 00:44:02.363382 env[1431]: time="2025-11-01T00:44:02.363351037Z" level=info msg="StopPodSandbox for \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\" returns successfully" Nov 1 00:44:02.364426 env[1431]: time="2025-11-01T00:44:02.364394146Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56df8c5d4b-rfbnt,Uid:4c3c0e0e-07f0-4e99-8395-721e399f588a,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:44:02.369123 systemd[1]: run-netns-cni\x2dd94adef7\x2df437\x2d2a0f\x2dce86\x2d8ae4c44c6c7f.mount: Deactivated successfully. Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.307 [INFO][4093] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.308 [INFO][4093] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" iface="eth0" netns="/var/run/netns/cni-f386db11-5d7c-5a0d-cc2f-89c7910481c9" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.308 [INFO][4093] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" iface="eth0" netns="/var/run/netns/cni-f386db11-5d7c-5a0d-cc2f-89c7910481c9" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.308 [INFO][4093] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" iface="eth0" netns="/var/run/netns/cni-f386db11-5d7c-5a0d-cc2f-89c7910481c9" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.308 [INFO][4093] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.308 [INFO][4093] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.357 [INFO][4105] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.357 [INFO][4105] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.358 [INFO][4105] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.372 [WARNING][4105] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.372 [INFO][4105] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.373 [INFO][4105] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:02.376306 env[1431]: 2025-11-01 00:44:02.375 [INFO][4093] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:02.377716 env[1431]: time="2025-11-01T00:44:02.377683360Z" level=info msg="TearDown network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\" successfully" Nov 1 00:44:02.377869 env[1431]: time="2025-11-01T00:44:02.377847661Z" level=info msg="StopPodSandbox for \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\" returns successfully" Nov 1 00:44:02.378915 env[1431]: time="2025-11-01T00:44:02.378886070Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-cpllc,Uid:31c65c5c-1a06-4110-b81b-98d3530e65c1,Namespace:calico-system,Attempt:1,}" Nov 1 00:44:02.381731 systemd[1]: run-netns-cni\x2df386db11\x2d5d7c\x2d5a0d\x2dcc2f\x2d89c7910481c9.mount: Deactivated successfully. Nov 1 00:44:02.497000 audit[4143]: NETFILTER_CFG table=filter:115 family=2 entries=20 op=nft_register_rule pid=4143 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:02.497000 audit[4143]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffdbdec6ca0 a2=0 a3=7ffdbdec6c8c items=0 ppid=2550 pid=4143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.497000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:02.501453 kubelet[2441]: I1101 00:44:02.501309 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-jfx7f" podStartSLOduration=40.501291722 podStartE2EDuration="40.501291722s" podCreationTimestamp="2025-11-01 00:43:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:44:02.476772911 +0000 UTC m=+47.180800379" watchObservedRunningTime="2025-11-01 00:44:02.501291722 +0000 UTC m=+47.205319090" Nov 1 00:44:02.505000 audit[4143]: NETFILTER_CFG table=nat:116 family=2 entries=14 op=nft_register_rule pid=4143 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:02.505000 audit[4143]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffdbdec6ca0 a2=0 a3=0 items=0 ppid=2550 pid=4143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.505000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:02.543000 audit[4155]: NETFILTER_CFG table=filter:117 family=2 entries=17 op=nft_register_rule pid=4155 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:02.543000 audit[4155]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd78d0f140 a2=0 a3=7ffd78d0f12c items=0 ppid=2550 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.543000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:02.550000 audit[4155]: NETFILTER_CFG table=nat:118 family=2 entries=35 op=nft_register_chain pid=4155 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:02.550000 audit[4155]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd78d0f140 a2=0 a3=7ffd78d0f12c items=0 ppid=2550 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.550000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:02.607038 systemd-networkd[1585]: calib1d958c89a5: Link UP Nov 1 00:44:02.618905 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:44:02.619001 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib1d958c89a5: link becomes ready Nov 1 00:44:02.619893 systemd-networkd[1585]: calib1d958c89a5: Gained carrier Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.502 [INFO][4118] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0 calico-apiserver-56df8c5d4b- calico-apiserver 4c3c0e0e-07f0-4e99-8395-721e399f588a 940 0 2025-11-01 00:43:32 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:56df8c5d4b projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-9f29a8c334 calico-apiserver-56df8c5d4b-rfbnt eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib1d958c89a5 [] [] }} ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-rfbnt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.502 [INFO][4118] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-rfbnt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.555 [INFO][4145] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" HandleID="k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.556 [INFO][4145] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" HandleID="k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5840), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-9f29a8c334", "pod":"calico-apiserver-56df8c5d4b-rfbnt", "timestamp":"2025-11-01 00:44:02.555185885 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9f29a8c334", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.557 [INFO][4145] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.557 [INFO][4145] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.557 [INFO][4145] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9f29a8c334' Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.577 [INFO][4145] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.580 [INFO][4145] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.585 [INFO][4145] ipam/ipam.go 511: Trying affinity for 192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.586 [INFO][4145] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.588 [INFO][4145] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.588 [INFO][4145] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.120.128/26 handle="k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.589 [INFO][4145] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0 Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.596 [INFO][4145] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.120.128/26 handle="k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.601 [INFO][4145] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.120.131/26] block=192.168.120.128/26 handle="k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.601 [INFO][4145] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.131/26] handle="k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.601 [INFO][4145] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:02.633732 env[1431]: 2025-11-01 00:44:02.601 [INFO][4145] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.120.131/26] IPv6=[] ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" HandleID="k8s-pod-network.c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.634785 env[1431]: 2025-11-01 00:44:02.603 [INFO][4118] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-rfbnt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0", GenerateName:"calico-apiserver-56df8c5d4b-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c3c0e0e-07f0-4e99-8395-721e399f588a", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56df8c5d4b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"", Pod:"calico-apiserver-56df8c5d4b-rfbnt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib1d958c89a5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:02.634785 env[1431]: 2025-11-01 00:44:02.604 [INFO][4118] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.131/32] ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-rfbnt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.634785 env[1431]: 2025-11-01 00:44:02.604 [INFO][4118] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib1d958c89a5 ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-rfbnt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.634785 env[1431]: 2025-11-01 00:44:02.608 [INFO][4118] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-rfbnt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.634785 env[1431]: 2025-11-01 00:44:02.616 [INFO][4118] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-rfbnt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0", GenerateName:"calico-apiserver-56df8c5d4b-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c3c0e0e-07f0-4e99-8395-721e399f588a", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56df8c5d4b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0", Pod:"calico-apiserver-56df8c5d4b-rfbnt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib1d958c89a5", MAC:"7a:b2:b8:cc:5c:0f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:02.634785 env[1431]: 2025-11-01 00:44:02.632 [INFO][4118] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-rfbnt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:02.650000 audit[4169]: NETFILTER_CFG table=filter:119 family=2 entries=54 op=nft_register_chain pid=4169 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:02.650000 audit[4169]: SYSCALL arch=c000003e syscall=46 success=yes exit=29396 a0=3 a1=7ffc8d20e2c0 a2=0 a3=7ffc8d20e2ac items=0 ppid=3721 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.650000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:02.659277 env[1431]: time="2025-11-01T00:44:02.659216679Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:44:02.659412 env[1431]: time="2025-11-01T00:44:02.659286880Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:44:02.659412 env[1431]: time="2025-11-01T00:44:02.659316280Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:44:02.659526 env[1431]: time="2025-11-01T00:44:02.659475581Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0 pid=4178 runtime=io.containerd.runc.v2 Nov 1 00:44:02.673421 systemd[1]: Started cri-containerd-c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0.scope. Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.693000 audit: BPF prog-id=174 op=LOAD Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4178 pid=4186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646163356335386130646236306331663238396362656433633435 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=4178 pid=4186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646163356335386130646236306331663238396362656433633435 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit: BPF prog-id=175 op=LOAD Nov 1 00:44:02.694000 audit[4186]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00030ad10 items=0 ppid=4178 pid=4186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646163356335386130646236306331663238396362656433633435 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.694000 audit: BPF prog-id=176 op=LOAD Nov 1 00:44:02.694000 audit[4186]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00030ad58 items=0 ppid=4178 pid=4186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646163356335386130646236306331663238396362656433633435 Nov 1 00:44:02.695000 audit: BPF prog-id=176 op=UNLOAD Nov 1 00:44:02.695000 audit: BPF prog-id=175 op=UNLOAD Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { perfmon } for pid=4186 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit[4186]: AVC avc: denied { bpf } for pid=4186 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.695000 audit: BPF prog-id=177 op=LOAD Nov 1 00:44:02.695000 audit[4186]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00030b168 items=0 ppid=4178 pid=4186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646163356335386130646236306331663238396362656433633435 Nov 1 00:44:02.747046 systemd-networkd[1585]: cali0d238fef447: Link UP Nov 1 00:44:02.759706 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0d238fef447: link becomes ready Nov 1 00:44:02.756760 systemd-networkd[1585]: cali0d238fef447: Gained carrier Nov 1 00:44:02.781283 env[1431]: time="2025-11-01T00:44:02.781238427Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56df8c5d4b-rfbnt,Uid:4c3c0e0e-07f0-4e99-8395-721e399f588a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0\"" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.521 [INFO][4129] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0 goldmane-666569f655- calico-system 31c65c5c-1a06-4110-b81b-98d3530e65c1 939 0 2025-11-01 00:43:35 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-9f29a8c334 goldmane-666569f655-cpllc eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali0d238fef447 [] [] }} ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Namespace="calico-system" Pod="goldmane-666569f655-cpllc" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.522 [INFO][4129] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Namespace="calico-system" Pod="goldmane-666569f655-cpllc" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.585 [INFO][4150] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" HandleID="k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.585 [INFO][4150] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" HandleID="k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d55e0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-9f29a8c334", "pod":"goldmane-666569f655-cpllc", "timestamp":"2025-11-01 00:44:02.585004241 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9f29a8c334", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.585 [INFO][4150] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.602 [INFO][4150] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.602 [INFO][4150] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9f29a8c334' Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.678 [INFO][4150] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.685 [INFO][4150] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.692 [INFO][4150] ipam/ipam.go 511: Trying affinity for 192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.698 [INFO][4150] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.705 [INFO][4150] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.706 [INFO][4150] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.120.128/26 handle="k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.709 [INFO][4150] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797 Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.713 [INFO][4150] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.120.128/26 handle="k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.728 [INFO][4150] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.120.132/26] block=192.168.120.128/26 handle="k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.730 [INFO][4150] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.132/26] handle="k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.731 [INFO][4150] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:02.788035 env[1431]: 2025-11-01 00:44:02.731 [INFO][4150] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.120.132/26] IPv6=[] ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" HandleID="k8s-pod-network.583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.788932 env[1431]: 2025-11-01 00:44:02.733 [INFO][4129] cni-plugin/k8s.go 418: Populated endpoint ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Namespace="calico-system" Pod="goldmane-666569f655-cpllc" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"31c65c5c-1a06-4110-b81b-98d3530e65c1", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"", Pod:"goldmane-666569f655-cpllc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.120.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0d238fef447", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:02.788932 env[1431]: 2025-11-01 00:44:02.733 [INFO][4129] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.132/32] ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Namespace="calico-system" Pod="goldmane-666569f655-cpllc" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.788932 env[1431]: 2025-11-01 00:44:02.733 [INFO][4129] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0d238fef447 ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Namespace="calico-system" Pod="goldmane-666569f655-cpllc" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.788932 env[1431]: 2025-11-01 00:44:02.766 [INFO][4129] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Namespace="calico-system" Pod="goldmane-666569f655-cpllc" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.788932 env[1431]: 2025-11-01 00:44:02.766 [INFO][4129] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Namespace="calico-system" Pod="goldmane-666569f655-cpllc" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"31c65c5c-1a06-4110-b81b-98d3530e65c1", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797", Pod:"goldmane-666569f655-cpllc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.120.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0d238fef447", MAC:"92:c2:98:52:fb:ab", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:02.788932 env[1431]: 2025-11-01 00:44:02.784 [INFO][4129] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797" Namespace="calico-system" Pod="goldmane-666569f655-cpllc" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:02.792021 env[1431]: time="2025-11-01T00:44:02.790787009Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:44:02.812865 env[1431]: time="2025-11-01T00:44:02.812795399Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:44:02.812865 env[1431]: time="2025-11-01T00:44:02.812837499Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:44:02.813239 env[1431]: time="2025-11-01T00:44:02.812851599Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:44:02.813359 env[1431]: time="2025-11-01T00:44:02.813258803Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797 pid=4230 runtime=io.containerd.runc.v2 Nov 1 00:44:02.835000 audit[4247]: NETFILTER_CFG table=filter:120 family=2 entries=58 op=nft_register_chain pid=4247 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:02.835000 audit[4247]: SYSCALL arch=c000003e syscall=46 success=yes exit=30408 a0=3 a1=7ffda6215490 a2=0 a3=7ffda621547c items=0 ppid=3721 pid=4247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.835000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:02.840681 systemd[1]: Started cri-containerd-583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797.scope. Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit: BPF prog-id=178 op=LOAD Nov 1 00:44:02.863000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[4239]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4230 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538336163343036666232313635663334656533393538616632626232 Nov 1 00:44:02.863000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.863000 audit[4239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4230 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538336163343036666232313635663334656533393538616632626232 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit: BPF prog-id=179 op=LOAD Nov 1 00:44:02.864000 audit[4239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000dfce0 items=0 ppid=4230 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538336163343036666232313635663334656533393538616632626232 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit: BPF prog-id=180 op=LOAD Nov 1 00:44:02.864000 audit[4239]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000dfd28 items=0 ppid=4230 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538336163343036666232313635663334656533393538616632626232 Nov 1 00:44:02.864000 audit: BPF prog-id=180 op=UNLOAD Nov 1 00:44:02.864000 audit: BPF prog-id=179 op=UNLOAD Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:02.864000 audit: BPF prog-id=181 op=LOAD Nov 1 00:44:02.864000 audit[4239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000364138 items=0 ppid=4230 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:02.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538336163343036666232313635663334656533393538616632626232 Nov 1 00:44:02.909635 env[1431]: time="2025-11-01T00:44:02.909581230Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-cpllc,Uid:31c65c5c-1a06-4110-b81b-98d3530e65c1,Namespace:calico-system,Attempt:1,} returns sandbox id \"583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797\"" Nov 1 00:44:03.054083 env[1431]: time="2025-11-01T00:44:03.053963765Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:03.058503 env[1431]: time="2025-11-01T00:44:03.058443503Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:44:03.058771 kubelet[2441]: E1101 00:44:03.058715 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:03.058880 kubelet[2441]: E1101 00:44:03.058777 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:03.059304 kubelet[2441]: E1101 00:44:03.059095 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-78pww,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-56df8c5d4b-rfbnt_calico-apiserver(4c3c0e0e-07f0-4e99-8395-721e399f588a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:03.059743 env[1431]: time="2025-11-01T00:44:03.059712913Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:44:03.060259 kubelet[2441]: E1101 00:44:03.060205 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:44:03.237078 env[1431]: time="2025-11-01T00:44:03.237022616Z" level=info msg="StopPodSandbox for \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\"" Nov 1 00:44:03.238115 env[1431]: time="2025-11-01T00:44:03.237398219Z" level=info msg="StopPodSandbox for \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\"" Nov 1 00:44:03.238603 env[1431]: time="2025-11-01T00:44:03.237443920Z" level=info msg="StopPodSandbox for \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\"" Nov 1 00:44:03.329611 env[1431]: time="2025-11-01T00:44:03.329469100Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:03.337091 env[1431]: time="2025-11-01T00:44:03.337012464Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:44:03.337869 kubelet[2441]: E1101 00:44:03.337494 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:44:03.337869 kubelet[2441]: E1101 00:44:03.337568 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:44:03.337869 kubelet[2441]: E1101 00:44:03.337791 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-zm5x4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-cpllc_calico-system(31c65c5c-1a06-4110-b81b-98d3530e65c1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:03.338990 kubelet[2441]: E1101 00:44:03.338933 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:44:03.383682 systemd-networkd[1585]: cali0beb186813a: Gained IPv6LL Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.335 [INFO][4304] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.335 [INFO][4304] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" iface="eth0" netns="/var/run/netns/cni-d2f6995e-2ef4-e91f-5cca-5e57d7b955fd" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.345 [INFO][4304] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" iface="eth0" netns="/var/run/netns/cni-d2f6995e-2ef4-e91f-5cca-5e57d7b955fd" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.346 [INFO][4304] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" iface="eth0" netns="/var/run/netns/cni-d2f6995e-2ef4-e91f-5cca-5e57d7b955fd" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.346 [INFO][4304] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.346 [INFO][4304] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.392 [INFO][4315] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.393 [INFO][4315] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.393 [INFO][4315] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.399 [WARNING][4315] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.399 [INFO][4315] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.409 [INFO][4315] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:03.413827 env[1431]: 2025-11-01 00:44:03.412 [INFO][4304] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:03.417582 systemd[1]: run-netns-cni\x2dd2f6995e\x2d2ef4\x2de91f\x2d5cca\x2d5e57d7b955fd.mount: Deactivated successfully. Nov 1 00:44:03.420411 env[1431]: time="2025-11-01T00:44:03.420349870Z" level=info msg="TearDown network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\" successfully" Nov 1 00:44:03.420625 env[1431]: time="2025-11-01T00:44:03.420411471Z" level=info msg="StopPodSandbox for \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\" returns successfully" Nov 1 00:44:03.421715 env[1431]: time="2025-11-01T00:44:03.421671281Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9ksnm,Uid:ce526820-d1dc-4357-9fb7-1cb0ce632942,Namespace:calico-system,Attempt:1,}" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.352 [INFO][4295] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.352 [INFO][4295] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" iface="eth0" netns="/var/run/netns/cni-fc0a104d-dd84-b9f0-8ab2-79e0e2ab580f" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.353 [INFO][4295] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" iface="eth0" netns="/var/run/netns/cni-fc0a104d-dd84-b9f0-8ab2-79e0e2ab580f" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.353 [INFO][4295] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" iface="eth0" netns="/var/run/netns/cni-fc0a104d-dd84-b9f0-8ab2-79e0e2ab580f" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.353 [INFO][4295] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.353 [INFO][4295] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.420 [INFO][4320] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.422 [INFO][4320] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.422 [INFO][4320] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.435 [WARNING][4320] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.435 [INFO][4320] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.438 [INFO][4320] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:03.442294 env[1431]: 2025-11-01 00:44:03.440 [INFO][4295] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:03.448100 env[1431]: time="2025-11-01T00:44:03.446033888Z" level=info msg="TearDown network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\" successfully" Nov 1 00:44:03.448100 env[1431]: time="2025-11-01T00:44:03.446074488Z" level=info msg="StopPodSandbox for \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\" returns successfully" Nov 1 00:44:03.445938 systemd[1]: run-netns-cni\x2dfc0a104d\x2ddd84\x2db9f0\x2d8ab2\x2d79e0e2ab580f.mount: Deactivated successfully. Nov 1 00:44:03.449315 env[1431]: time="2025-11-01T00:44:03.449273215Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56df8c5d4b-65nv4,Uid:c4fa1769-b5ef-44fb-bb2e-c91531ca49da,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:44:03.460590 kubelet[2441]: E1101 00:44:03.458997 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:44:03.461277 kubelet[2441]: E1101 00:44:03.461246 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.362 [INFO][4291] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.362 [INFO][4291] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" iface="eth0" netns="/var/run/netns/cni-64842e22-bbe1-fee4-8179-10b1a8d9cde6" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.363 [INFO][4291] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" iface="eth0" netns="/var/run/netns/cni-64842e22-bbe1-fee4-8179-10b1a8d9cde6" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.365 [INFO][4291] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" iface="eth0" netns="/var/run/netns/cni-64842e22-bbe1-fee4-8179-10b1a8d9cde6" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.365 [INFO][4291] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.365 [INFO][4291] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.453 [INFO][4326] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.454 [INFO][4326] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.454 [INFO][4326] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.466 [WARNING][4326] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.466 [INFO][4326] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.472 [INFO][4326] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:03.475390 env[1431]: 2025-11-01 00:44:03.474 [INFO][4291] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:03.485295 env[1431]: time="2025-11-01T00:44:03.482090093Z" level=info msg="TearDown network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\" successfully" Nov 1 00:44:03.485295 env[1431]: time="2025-11-01T00:44:03.482129394Z" level=info msg="StopPodSandbox for \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\" returns successfully" Nov 1 00:44:03.483487 systemd[1]: run-netns-cni\x2d64842e22\x2dbbe1\x2dfee4\x2d8179\x2d10b1a8d9cde6.mount: Deactivated successfully. Nov 1 00:44:03.485522 env[1431]: time="2025-11-01T00:44:03.485378221Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-578795468d-6l946,Uid:c8835bb5-2375-444c-85bc-4149b7d50cd0,Namespace:calico-system,Attempt:1,}" Nov 1 00:44:03.531000 audit[4342]: NETFILTER_CFG table=filter:121 family=2 entries=14 op=nft_register_rule pid=4342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:03.531000 audit[4342]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd26e7ae20 a2=0 a3=7ffd26e7ae0c items=0 ppid=2550 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.531000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:03.547000 audit[4342]: NETFILTER_CFG table=nat:122 family=2 entries=20 op=nft_register_rule pid=4342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:03.547000 audit[4342]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd26e7ae20 a2=0 a3=7ffd26e7ae0c items=0 ppid=2550 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.547000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:03.736945 systemd-networkd[1585]: calibbf12b8e13d: Link UP Nov 1 00:44:03.749865 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:44:03.749957 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibbf12b8e13d: link becomes ready Nov 1 00:44:03.749905 systemd-networkd[1585]: calibbf12b8e13d: Gained carrier Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.597 [INFO][4343] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0 calico-apiserver-56df8c5d4b- calico-apiserver c4fa1769-b5ef-44fb-bb2e-c91531ca49da 967 0 2025-11-01 00:43:32 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:56df8c5d4b projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-9f29a8c334 calico-apiserver-56df8c5d4b-65nv4 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calibbf12b8e13d [] [] }} ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-65nv4" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.597 [INFO][4343] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-65nv4" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.681 [INFO][4373] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" HandleID="k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.681 [INFO][4373] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" HandleID="k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad3a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-9f29a8c334", "pod":"calico-apiserver-56df8c5d4b-65nv4", "timestamp":"2025-11-01 00:44:03.681137681 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9f29a8c334", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.681 [INFO][4373] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.681 [INFO][4373] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.681 [INFO][4373] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9f29a8c334' Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.690 [INFO][4373] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.697 [INFO][4373] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.704 [INFO][4373] ipam/ipam.go 511: Trying affinity for 192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.707 [INFO][4373] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.709 [INFO][4373] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.709 [INFO][4373] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.120.128/26 handle="k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.711 [INFO][4373] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01 Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.718 [INFO][4373] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.120.128/26 handle="k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.727 [INFO][4373] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.120.133/26] block=192.168.120.128/26 handle="k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.727 [INFO][4373] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.133/26] handle="k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.727 [INFO][4373] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:03.764261 env[1431]: 2025-11-01 00:44:03.728 [INFO][4373] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.120.133/26] IPv6=[] ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" HandleID="k8s-pod-network.09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.765208 env[1431]: 2025-11-01 00:44:03.730 [INFO][4343] cni-plugin/k8s.go 418: Populated endpoint ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-65nv4" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0", GenerateName:"calico-apiserver-56df8c5d4b-", Namespace:"calico-apiserver", SelfLink:"", UID:"c4fa1769-b5ef-44fb-bb2e-c91531ca49da", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56df8c5d4b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"", Pod:"calico-apiserver-56df8c5d4b-65nv4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibbf12b8e13d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:03.765208 env[1431]: 2025-11-01 00:44:03.730 [INFO][4343] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.133/32] ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-65nv4" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.765208 env[1431]: 2025-11-01 00:44:03.731 [INFO][4343] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibbf12b8e13d ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-65nv4" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.765208 env[1431]: 2025-11-01 00:44:03.751 [INFO][4343] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-65nv4" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.765208 env[1431]: 2025-11-01 00:44:03.751 [INFO][4343] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-65nv4" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0", GenerateName:"calico-apiserver-56df8c5d4b-", Namespace:"calico-apiserver", SelfLink:"", UID:"c4fa1769-b5ef-44fb-bb2e-c91531ca49da", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56df8c5d4b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01", Pod:"calico-apiserver-56df8c5d4b-65nv4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibbf12b8e13d", MAC:"8e:76:5e:d6:55:00", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:03.765208 env[1431]: 2025-11-01 00:44:03.761 [INFO][4343] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01" Namespace="calico-apiserver" Pod="calico-apiserver-56df8c5d4b-65nv4" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:03.784328 env[1431]: time="2025-11-01T00:44:03.784162454Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:44:03.784328 env[1431]: time="2025-11-01T00:44:03.784201154Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:44:03.784328 env[1431]: time="2025-11-01T00:44:03.784214854Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:44:03.784689 env[1431]: time="2025-11-01T00:44:03.784593058Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01 pid=4413 runtime=io.containerd.runc.v2 Nov 1 00:44:03.785000 audit[4414]: NETFILTER_CFG table=filter:123 family=2 entries=51 op=nft_register_chain pid=4414 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:03.785000 audit[4414]: SYSCALL arch=c000003e syscall=46 success=yes exit=27100 a0=3 a1=7ffd30053760 a2=0 a3=7ffd3005374c items=0 ppid=3721 pid=4414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.785000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:03.808982 systemd[1]: Started cri-containerd-09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01.scope. Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.827000 audit: BPF prog-id=182 op=LOAD Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643263396362323264356634623931623131643338623631636532 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643263396362323264356634623931623131643338623631636532 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit: BPF prog-id=183 op=LOAD Nov 1 00:44:03.828000 audit[4422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000404110 items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643263396362323264356634623931623131643338623631636532 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit: BPF prog-id=184 op=LOAD Nov 1 00:44:03.828000 audit[4422]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000404158 items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643263396362323264356634623931623131643338623631636532 Nov 1 00:44:03.828000 audit: BPF prog-id=184 op=UNLOAD Nov 1 00:44:03.828000 audit: BPF prog-id=183 op=UNLOAD Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.828000 audit: BPF prog-id=185 op=LOAD Nov 1 00:44:03.828000 audit[4422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000404568 items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643263396362323264356634623931623131643338623631636532 Nov 1 00:44:03.842682 systemd-networkd[1585]: cali671bcaa7bc2: Link UP Nov 1 00:44:03.850579 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali671bcaa7bc2: link becomes ready Nov 1 00:44:03.849084 systemd-networkd[1585]: cali671bcaa7bc2: Gained carrier Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.621 [INFO][4336] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0 csi-node-driver- calico-system ce526820-d1dc-4357-9fb7-1cb0ce632942 965 0 2025-11-01 00:43:37 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-9f29a8c334 csi-node-driver-9ksnm eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali671bcaa7bc2 [] [] }} ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Namespace="calico-system" Pod="csi-node-driver-9ksnm" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.622 [INFO][4336] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Namespace="calico-system" Pod="csi-node-driver-9ksnm" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.708 [INFO][4379] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" HandleID="k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.711 [INFO][4379] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" HandleID="k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003253a0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-9f29a8c334", "pod":"csi-node-driver-9ksnm", "timestamp":"2025-11-01 00:44:03.708649014 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9f29a8c334", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.711 [INFO][4379] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.728 [INFO][4379] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.728 [INFO][4379] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9f29a8c334' Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.790 [INFO][4379] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.796 [INFO][4379] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.803 [INFO][4379] ipam/ipam.go 511: Trying affinity for 192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.805 [INFO][4379] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.811 [INFO][4379] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.811 [INFO][4379] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.120.128/26 handle="k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.816 [INFO][4379] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953 Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.821 [INFO][4379] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.120.128/26 handle="k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.834 [INFO][4379] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.120.134/26] block=192.168.120.128/26 handle="k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.834 [INFO][4379] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.134/26] handle="k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.834 [INFO][4379] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:03.878721 env[1431]: 2025-11-01 00:44:03.834 [INFO][4379] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.120.134/26] IPv6=[] ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" HandleID="k8s-pod-network.4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.880467 env[1431]: 2025-11-01 00:44:03.836 [INFO][4336] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Namespace="calico-system" Pod="csi-node-driver-9ksnm" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ce526820-d1dc-4357-9fb7-1cb0ce632942", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"", Pod:"csi-node-driver-9ksnm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.120.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali671bcaa7bc2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:03.880467 env[1431]: 2025-11-01 00:44:03.837 [INFO][4336] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.134/32] ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Namespace="calico-system" Pod="csi-node-driver-9ksnm" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.880467 env[1431]: 2025-11-01 00:44:03.837 [INFO][4336] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali671bcaa7bc2 ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Namespace="calico-system" Pod="csi-node-driver-9ksnm" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.880467 env[1431]: 2025-11-01 00:44:03.851 [INFO][4336] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Namespace="calico-system" Pod="csi-node-driver-9ksnm" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.880467 env[1431]: 2025-11-01 00:44:03.853 [INFO][4336] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Namespace="calico-system" Pod="csi-node-driver-9ksnm" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ce526820-d1dc-4357-9fb7-1cb0ce632942", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953", Pod:"csi-node-driver-9ksnm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.120.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali671bcaa7bc2", MAC:"a6:02:1e:d4:e0:1e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:03.880467 env[1431]: 2025-11-01 00:44:03.873 [INFO][4336] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953" Namespace="calico-system" Pod="csi-node-driver-9ksnm" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:03.884384 env[1431]: time="2025-11-01T00:44:03.884337603Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-56df8c5d4b-65nv4,Uid:c4fa1769-b5ef-44fb-bb2e-c91531ca49da,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01\"" Nov 1 00:44:03.888588 env[1431]: time="2025-11-01T00:44:03.888294537Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:44:03.913227 env[1431]: time="2025-11-01T00:44:03.913058046Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:44:03.913227 env[1431]: time="2025-11-01T00:44:03.913198748Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:44:03.913480 env[1431]: time="2025-11-01T00:44:03.913215448Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:44:03.913747 env[1431]: time="2025-11-01T00:44:03.913697752Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953 pid=4463 runtime=io.containerd.runc.v2 Nov 1 00:44:03.931264 systemd[1]: Started cri-containerd-4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953.scope. Nov 1 00:44:03.956235 systemd-networkd[1585]: cali6a22b1e03bd: Link UP Nov 1 00:44:03.966646 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6a22b1e03bd: link becomes ready Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.968000 audit: BPF prog-id=186 op=LOAD Nov 1 00:44:03.973200 systemd-networkd[1585]: cali6a22b1e03bd: Gained carrier Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4463 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466346630383362613464343437613064303830616235393136366638 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4463 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466346630383362613464343437613064303830616235393136366638 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit: BPF prog-id=187 op=LOAD Nov 1 00:44:03.973000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000248e0 items=0 ppid=4463 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466346630383362613464343437613064303830616235393136366638 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit: BPF prog-id=188 op=LOAD Nov 1 00:44:03.973000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024928 items=0 ppid=4463 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466346630383362613464343437613064303830616235393136366638 Nov 1 00:44:03.973000 audit: BPF prog-id=188 op=UNLOAD Nov 1 00:44:03.973000 audit: BPF prog-id=187 op=UNLOAD Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:03.973000 audit: BPF prog-id=189 op=LOAD Nov 1 00:44:03.973000 audit[4474]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024d38 items=0 ppid=4463 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466346630383362613464343437613064303830616235393136366638 Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.666 [INFO][4360] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0 calico-kube-controllers-578795468d- calico-system c8835bb5-2375-444c-85bc-4149b7d50cd0 969 0 2025-11-01 00:43:37 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:578795468d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-9f29a8c334 calico-kube-controllers-578795468d-6l946 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali6a22b1e03bd [] [] }} ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Namespace="calico-system" Pod="calico-kube-controllers-578795468d-6l946" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.666 [INFO][4360] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Namespace="calico-system" Pod="calico-kube-controllers-578795468d-6l946" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.746 [INFO][4389] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" HandleID="k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.747 [INFO][4389] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" HandleID="k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002defe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-9f29a8c334", "pod":"calico-kube-controllers-578795468d-6l946", "timestamp":"2025-11-01 00:44:03.746278033 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9f29a8c334", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.748 [INFO][4389] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.834 [INFO][4389] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.834 [INFO][4389] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9f29a8c334' Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.891 [INFO][4389] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.897 [INFO][4389] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.903 [INFO][4389] ipam/ipam.go 511: Trying affinity for 192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.906 [INFO][4389] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.909 [INFO][4389] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.909 [INFO][4389] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.120.128/26 handle="k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.910 [INFO][4389] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102 Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.919 [INFO][4389] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.120.128/26 handle="k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.934 [INFO][4389] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.120.135/26] block=192.168.120.128/26 handle="k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.935 [INFO][4389] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.135/26] handle="k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.935 [INFO][4389] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:03.994045 env[1431]: 2025-11-01 00:44:03.935 [INFO][4389] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.120.135/26] IPv6=[] ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" HandleID="k8s-pod-network.6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.994779 env[1431]: 2025-11-01 00:44:03.939 [INFO][4360] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Namespace="calico-system" Pod="calico-kube-controllers-578795468d-6l946" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0", GenerateName:"calico-kube-controllers-578795468d-", Namespace:"calico-system", SelfLink:"", UID:"c8835bb5-2375-444c-85bc-4149b7d50cd0", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"578795468d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"", Pod:"calico-kube-controllers-578795468d-6l946", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.120.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6a22b1e03bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:03.994779 env[1431]: 2025-11-01 00:44:03.939 [INFO][4360] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.135/32] ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Namespace="calico-system" Pod="calico-kube-controllers-578795468d-6l946" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.994779 env[1431]: 2025-11-01 00:44:03.939 [INFO][4360] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6a22b1e03bd ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Namespace="calico-system" Pod="calico-kube-controllers-578795468d-6l946" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.994779 env[1431]: 2025-11-01 00:44:03.959 [INFO][4360] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Namespace="calico-system" Pod="calico-kube-controllers-578795468d-6l946" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.994779 env[1431]: 2025-11-01 00:44:03.959 [INFO][4360] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Namespace="calico-system" Pod="calico-kube-controllers-578795468d-6l946" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0", GenerateName:"calico-kube-controllers-578795468d-", Namespace:"calico-system", SelfLink:"", UID:"c8835bb5-2375-444c-85bc-4149b7d50cd0", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"578795468d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102", Pod:"calico-kube-controllers-578795468d-6l946", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.120.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6a22b1e03bd", MAC:"c6:61:48:a3:23:20", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:03.994779 env[1431]: 2025-11-01 00:44:03.986 [INFO][4360] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102" Namespace="calico-system" Pod="calico-kube-controllers-578795468d-6l946" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:03.995000 audit[4495]: NETFILTER_CFG table=filter:124 family=2 entries=44 op=nft_register_chain pid=4495 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:03.995000 audit[4495]: SYSCALL arch=c000003e syscall=46 success=yes exit=21920 a0=3 a1=7ffe5c476ef0 a2=0 a3=7ffe5c476edc items=0 ppid=3721 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:03.995000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:04.007153 env[1431]: time="2025-11-01T00:44:04.007118543Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9ksnm,Uid:ce526820-d1dc-4357-9fb7-1cb0ce632942,Namespace:calico-system,Attempt:1,} returns sandbox id \"4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953\"" Nov 1 00:44:04.022185 env[1431]: time="2025-11-01T00:44:04.022122968Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:44:04.022370 env[1431]: time="2025-11-01T00:44:04.022343070Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:44:04.022497 env[1431]: time="2025-11-01T00:44:04.022472871Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:44:04.022794 env[1431]: time="2025-11-01T00:44:04.022758074Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102 pid=4517 runtime=io.containerd.runc.v2 Nov 1 00:44:04.027000 audit[4527]: NETFILTER_CFG table=filter:125 family=2 entries=54 op=nft_register_chain pid=4527 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:04.027000 audit[4527]: SYSCALL arch=c000003e syscall=46 success=yes exit=25960 a0=3 a1=7ffffe1181e0 a2=0 a3=7ffffe1181cc items=0 ppid=3721 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:04.027000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:04.038189 systemd[1]: Started cri-containerd-6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102.scope. Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.054000 audit: BPF prog-id=190 op=LOAD Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4517 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:04.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663646639613639616236613632306131333435393230336237343765 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4517 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:04.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663646639613639616236613632306131333435393230336237343765 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit: BPF prog-id=191 op=LOAD Nov 1 00:44:04.055000 audit[4528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00028c940 items=0 ppid=4517 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:04.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663646639613639616236613632306131333435393230336237343765 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit: BPF prog-id=192 op=LOAD Nov 1 00:44:04.055000 audit[4528]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00028c988 items=0 ppid=4517 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:04.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663646639613639616236613632306131333435393230336237343765 Nov 1 00:44:04.055000 audit: BPF prog-id=192 op=UNLOAD Nov 1 00:44:04.055000 audit: BPF prog-id=191 op=UNLOAD Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { perfmon } for pid=4528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit[4528]: AVC avc: denied { bpf } for pid=4528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:04.055000 audit: BPF prog-id=193 op=LOAD Nov 1 00:44:04.055000 audit[4528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00028cd98 items=0 ppid=4517 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:04.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663646639613639616236613632306131333435393230336237343765 Nov 1 00:44:04.086916 env[1431]: time="2025-11-01T00:44:04.086868510Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-578795468d-6l946,Uid:c8835bb5-2375-444c-85bc-4149b7d50cd0,Namespace:calico-system,Attempt:1,} returns sandbox id \"6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102\"" Nov 1 00:44:04.169956 env[1431]: time="2025-11-01T00:44:04.169899504Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:04.172822 env[1431]: time="2025-11-01T00:44:04.172771428Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:44:04.173039 kubelet[2441]: E1101 00:44:04.172992 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:04.173386 kubelet[2441]: E1101 00:44:04.173046 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:04.173386 kubelet[2441]: E1101 00:44:04.173322 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-h4s8q,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-56df8c5d4b-65nv4_calico-apiserver(c4fa1769-b5ef-44fb-bb2e-c91531ca49da): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:04.173922 env[1431]: time="2025-11-01T00:44:04.173887638Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:44:04.175378 kubelet[2441]: E1101 00:44:04.175324 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:44:04.343726 systemd-networkd[1585]: calib1d958c89a5: Gained IPv6LL Nov 1 00:44:04.437306 env[1431]: time="2025-11-01T00:44:04.437250140Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:04.441368 env[1431]: time="2025-11-01T00:44:04.441312174Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:44:04.441801 kubelet[2441]: E1101 00:44:04.441590 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:44:04.441801 kubelet[2441]: E1101 00:44:04.441653 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:44:04.441959 kubelet[2441]: E1101 00:44:04.441879 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vn945,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:04.442524 env[1431]: time="2025-11-01T00:44:04.442469984Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:44:04.489794 kubelet[2441]: E1101 00:44:04.489748 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:44:04.491249 kubelet[2441]: E1101 00:44:04.490080 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:44:04.491249 kubelet[2441]: E1101 00:44:04.490169 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:44:04.535000 audit[4553]: NETFILTER_CFG table=filter:126 family=2 entries=14 op=nft_register_rule pid=4553 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:04.535000 audit[4553]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe1cc143d0 a2=0 a3=7ffe1cc143bc items=0 ppid=2550 pid=4553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:04.535000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:04.540000 audit[4553]: NETFILTER_CFG table=nat:127 family=2 entries=20 op=nft_register_rule pid=4553 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:04.540000 audit[4553]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe1cc143d0 a2=0 a3=7ffe1cc143bc items=0 ppid=2550 pid=4553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:04.540000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:04.699450 env[1431]: time="2025-11-01T00:44:04.699362933Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:04.702619 env[1431]: time="2025-11-01T00:44:04.702523659Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:44:04.702889 kubelet[2441]: E1101 00:44:04.702838 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:44:04.703012 kubelet[2441]: E1101 00:44:04.702905 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:44:04.703248 kubelet[2441]: E1101 00:44:04.703174 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2dxjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-578795468d-6l946_calico-system(c8835bb5-2375-444c-85bc-4149b7d50cd0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:04.703825 env[1431]: time="2025-11-01T00:44:04.703791470Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:44:04.705262 kubelet[2441]: E1101 00:44:04.705223 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:44:04.791830 systemd-networkd[1585]: cali0d238fef447: Gained IPv6LL Nov 1 00:44:04.965383 env[1431]: time="2025-11-01T00:44:04.965247256Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:04.972705 env[1431]: time="2025-11-01T00:44:04.972643718Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:44:04.973032 kubelet[2441]: E1101 00:44:04.972990 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:44:04.973158 kubelet[2441]: E1101 00:44:04.973046 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:44:04.973254 kubelet[2441]: E1101 00:44:04.973206 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vn945,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:04.974669 kubelet[2441]: E1101 00:44:04.974627 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:44:05.239910 systemd-networkd[1585]: calibbf12b8e13d: Gained IPv6LL Nov 1 00:44:05.468943 kubelet[2441]: E1101 00:44:05.468889 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:44:05.469441 kubelet[2441]: E1101 00:44:05.469335 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:44:05.469827 kubelet[2441]: E1101 00:44:05.469778 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:44:05.495719 systemd-networkd[1585]: cali671bcaa7bc2: Gained IPv6LL Nov 1 00:44:05.752694 systemd-networkd[1585]: cali6a22b1e03bd: Gained IPv6LL Nov 1 00:44:07.236743 env[1431]: time="2025-11-01T00:44:07.236677355Z" level=info msg="StopPodSandbox for \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\"" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.290 [INFO][4569] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.290 [INFO][4569] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" iface="eth0" netns="/var/run/netns/cni-e3f7bc2b-fd6a-61c3-12ad-f56b5d2a426d" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.290 [INFO][4569] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" iface="eth0" netns="/var/run/netns/cni-e3f7bc2b-fd6a-61c3-12ad-f56b5d2a426d" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.291 [INFO][4569] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" iface="eth0" netns="/var/run/netns/cni-e3f7bc2b-fd6a-61c3-12ad-f56b5d2a426d" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.291 [INFO][4569] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.291 [INFO][4569] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.315 [INFO][4576] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.315 [INFO][4576] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.315 [INFO][4576] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.324 [WARNING][4576] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.324 [INFO][4576] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.326 [INFO][4576] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:07.328766 env[1431]: 2025-11-01 00:44:07.327 [INFO][4569] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:07.332539 systemd[1]: run-netns-cni\x2de3f7bc2b\x2dfd6a\x2d61c3\x2d12ad\x2df56b5d2a426d.mount: Deactivated successfully. Nov 1 00:44:07.334444 env[1431]: time="2025-11-01T00:44:07.334023038Z" level=info msg="TearDown network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\" successfully" Nov 1 00:44:07.334444 env[1431]: time="2025-11-01T00:44:07.334103239Z" level=info msg="StopPodSandbox for \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\" returns successfully" Nov 1 00:44:07.334951 env[1431]: time="2025-11-01T00:44:07.334921245Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n8ngt,Uid:a1f1ab45-e8ff-47b7-b5f4-8707d57d8285,Namespace:kube-system,Attempt:1,}" Nov 1 00:44:07.499528 systemd-networkd[1585]: cali3ac89f0cc46: Link UP Nov 1 00:44:07.510812 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:44:07.511239 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3ac89f0cc46: link becomes ready Nov 1 00:44:07.511034 systemd-networkd[1585]: cali3ac89f0cc46: Gained carrier Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.419 [INFO][4583] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0 coredns-674b8bbfcf- kube-system a1f1ab45-e8ff-47b7-b5f4-8707d57d8285 1038 0 2025-11-01 00:43:22 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-9f29a8c334 coredns-674b8bbfcf-n8ngt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3ac89f0cc46 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Namespace="kube-system" Pod="coredns-674b8bbfcf-n8ngt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.420 [INFO][4583] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Namespace="kube-system" Pod="coredns-674b8bbfcf-n8ngt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.450 [INFO][4595] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" HandleID="k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.450 [INFO][4595] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" HandleID="k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cb090), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-9f29a8c334", "pod":"coredns-674b8bbfcf-n8ngt", "timestamp":"2025-11-01 00:44:07.450083272 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9f29a8c334", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.450 [INFO][4595] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.450 [INFO][4595] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.450 [INFO][4595] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9f29a8c334' Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.458 [INFO][4595] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.462 [INFO][4595] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.465 [INFO][4595] ipam/ipam.go 511: Trying affinity for 192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.467 [INFO][4595] ipam/ipam.go 158: Attempting to load block cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.469 [INFO][4595] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.120.128/26 host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.472 [INFO][4595] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.120.128/26 handle="k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.476 [INFO][4595] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1 Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.481 [INFO][4595] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.120.128/26 handle="k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.491 [INFO][4595] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.120.136/26] block=192.168.120.128/26 handle="k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.491 [INFO][4595] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.120.136/26] handle="k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" host="ci-3510.3.8-n-9f29a8c334" Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.491 [INFO][4595] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:07.529261 env[1431]: 2025-11-01 00:44:07.491 [INFO][4595] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.120.136/26] IPv6=[] ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" HandleID="k8s-pod-network.2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.530152 env[1431]: 2025-11-01 00:44:07.493 [INFO][4583] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Namespace="kube-system" Pod="coredns-674b8bbfcf-n8ngt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"a1f1ab45-e8ff-47b7-b5f4-8707d57d8285", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"", Pod:"coredns-674b8bbfcf-n8ngt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3ac89f0cc46", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:07.530152 env[1431]: 2025-11-01 00:44:07.493 [INFO][4583] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.120.136/32] ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Namespace="kube-system" Pod="coredns-674b8bbfcf-n8ngt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.530152 env[1431]: 2025-11-01 00:44:07.493 [INFO][4583] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3ac89f0cc46 ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Namespace="kube-system" Pod="coredns-674b8bbfcf-n8ngt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.530152 env[1431]: 2025-11-01 00:44:07.512 [INFO][4583] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Namespace="kube-system" Pod="coredns-674b8bbfcf-n8ngt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.530152 env[1431]: 2025-11-01 00:44:07.512 [INFO][4583] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Namespace="kube-system" Pod="coredns-674b8bbfcf-n8ngt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"a1f1ab45-e8ff-47b7-b5f4-8707d57d8285", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1", Pod:"coredns-674b8bbfcf-n8ngt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3ac89f0cc46", MAC:"96:2a:e5:c1:d0:bc", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:07.530152 env[1431]: 2025-11-01 00:44:07.527 [INFO][4583] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1" Namespace="kube-system" Pod="coredns-674b8bbfcf-n8ngt" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:07.547366 env[1431]: time="2025-11-01T00:44:07.545868943Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:44:07.547366 env[1431]: time="2025-11-01T00:44:07.545954244Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:44:07.547366 env[1431]: time="2025-11-01T00:44:07.545996644Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:44:07.547366 env[1431]: time="2025-11-01T00:44:07.546168145Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1 pid=4620 runtime=io.containerd.runc.v2 Nov 1 00:44:07.573000 audit[4634]: NETFILTER_CFG table=filter:128 family=2 entries=44 op=nft_register_chain pid=4634 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:07.592330 kernel: kauditd_printk_skb: 434 callbacks suppressed Nov 1 00:44:07.592452 kernel: audit: type=1325 audit(1761957847.573:1267): table=filter:128 family=2 entries=44 op=nft_register_chain pid=4634 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:44:07.591690 systemd[1]: Started cri-containerd-2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1.scope. Nov 1 00:44:07.573000 audit[4634]: SYSCALL arch=c000003e syscall=46 success=yes exit=21484 a0=3 a1=7ffe371c5370 a2=0 a3=7ffe371c535c items=0 ppid=3721 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.614768 kernel: audit: type=1300 audit(1761957847.573:1267): arch=c000003e syscall=46 success=yes exit=21484 a0=3 a1=7ffe371c5370 a2=0 a3=7ffe371c535c items=0 ppid=3721 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.573000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:07.631357 kernel: audit: type=1327 audit(1761957847.573:1267): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.657117 kernel: audit: type=1400 audit(1761957847.608:1268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.657199 kernel: audit: type=1400 audit(1761957847.608:1269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.670564 kernel: audit: type=1400 audit(1761957847.608:1270): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.689380 env[1431]: time="2025-11-01T00:44:07.686995878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n8ngt,Uid:a1f1ab45-e8ff-47b7-b5f4-8707d57d8285,Namespace:kube-system,Attempt:1,} returns sandbox id \"2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1\"" Nov 1 00:44:07.699700 kernel: audit: type=1400 audit(1761957847.608:1271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.699828 kernel: audit: type=1400 audit(1761957847.608:1272): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.712462 kernel: audit: type=1400 audit(1761957847.608:1273): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.613000 audit: BPF prog-id=194 op=LOAD Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4620 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230343366656631376265303536316465383563643463633963376636 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4620 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230343366656631376265303536316465383563643463633963376636 Nov 1 00:44:07.725588 kernel: audit: type=1400 audit(1761957847.608:1274): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit: BPF prog-id=195 op=LOAD Nov 1 00:44:07.614000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00023af30 items=0 ppid=4620 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230343366656631376265303536316465383563643463633963376636 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.726856 env[1431]: time="2025-11-01T00:44:07.725500288Z" level=info msg="CreateContainer within sandbox \"2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit: BPF prog-id=196 op=LOAD Nov 1 00:44:07.614000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00023af78 items=0 ppid=4620 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230343366656631376265303536316465383563643463633963376636 Nov 1 00:44:07.614000 audit: BPF prog-id=196 op=UNLOAD Nov 1 00:44:07.614000 audit: BPF prog-id=195 op=UNLOAD Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.614000 audit: BPF prog-id=197 op=LOAD Nov 1 00:44:07.614000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00023b388 items=0 ppid=4620 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230343366656631376265303536316465383563643463633963376636 Nov 1 00:44:07.768772 env[1431]: time="2025-11-01T00:44:07.768666436Z" level=info msg="CreateContainer within sandbox \"2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"7c5d75c8f2469ad407de7f6bec07eb11182e9dc66f414b2f9220b4fbfcca5ddf\"" Nov 1 00:44:07.772052 env[1431]: time="2025-11-01T00:44:07.772016763Z" level=info msg="StartContainer for \"7c5d75c8f2469ad407de7f6bec07eb11182e9dc66f414b2f9220b4fbfcca5ddf\"" Nov 1 00:44:07.789153 systemd[1]: Started cri-containerd-7c5d75c8f2469ad407de7f6bec07eb11182e9dc66f414b2f9220b4fbfcca5ddf.scope. Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.811000 audit: BPF prog-id=198 op=LOAD Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4620 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763356437356338663234363961643430376465376636626563303765 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4620 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763356437356338663234363961643430376465376636626563303765 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.812000 audit: BPF prog-id=199 op=LOAD Nov 1 00:44:07.812000 audit[4662]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000355d30 items=0 ppid=4620 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763356437356338663234363961643430376465376636626563303765 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.813000 audit: BPF prog-id=200 op=LOAD Nov 1 00:44:07.813000 audit[4662]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000355d78 items=0 ppid=4620 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763356437356338663234363961643430376465376636626563303765 Nov 1 00:44:07.814000 audit: BPF prog-id=200 op=UNLOAD Nov 1 00:44:07.814000 audit: BPF prog-id=199 op=UNLOAD Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { perfmon } for pid=4662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit[4662]: AVC avc: denied { bpf } for pid=4662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:44:07.814000 audit: BPF prog-id=201 op=LOAD Nov 1 00:44:07.814000 audit[4662]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003a4188 items=0 ppid=4620 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:07.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763356437356338663234363961643430376465376636626563303765 Nov 1 00:44:07.833159 env[1431]: time="2025-11-01T00:44:07.833091454Z" level=info msg="StartContainer for \"7c5d75c8f2469ad407de7f6bec07eb11182e9dc66f414b2f9220b4fbfcca5ddf\" returns successfully" Nov 1 00:44:07.842000 audit[4673]: AVC avc: denied { getattr } for pid=4673 comm="coredns" path="cgroup:[4026532709]" dev="nsfs" ino=4026532709 scontext=system_u:system_r:svirt_lxc_net_t:s0:c322,c416 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:44:07.842000 audit[4673]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00014ca08 a2=c0000cfbd8 a3=0 items=0 ppid=4620 pid=4673 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c322,c416 key=(null) Nov 1 00:44:07.842000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:44:08.497483 kubelet[2441]: I1101 00:44:08.496337 2441 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-n8ngt" podStartSLOduration=46.496318141 podStartE2EDuration="46.496318141s" podCreationTimestamp="2025-11-01 00:43:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:44:08.494816729 +0000 UTC m=+53.198844097" watchObservedRunningTime="2025-11-01 00:44:08.496318141 +0000 UTC m=+53.200345509" Nov 1 00:44:08.540000 audit[4693]: NETFILTER_CFG table=filter:129 family=2 entries=14 op=nft_register_rule pid=4693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:08.540000 audit[4693]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff506c37f0 a2=0 a3=7fff506c37dc items=0 ppid=2550 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:08.540000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:08.545000 audit[4693]: NETFILTER_CFG table=nat:130 family=2 entries=44 op=nft_register_rule pid=4693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:08.545000 audit[4693]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff506c37f0 a2=0 a3=7fff506c37dc items=0 ppid=2550 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:08.545000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:08.564000 audit[4695]: NETFILTER_CFG table=filter:131 family=2 entries=14 op=nft_register_rule pid=4695 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:08.564000 audit[4695]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffb0b7a040 a2=0 a3=7fffb0b7a02c items=0 ppid=2550 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:08.564000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:08.575000 audit[4695]: NETFILTER_CFG table=nat:132 family=2 entries=56 op=nft_register_chain pid=4695 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:44:08.575000 audit[4695]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7fffb0b7a040 a2=0 a3=7fffb0b7a02c items=0 ppid=2550 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:44:08.575000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:44:08.951735 systemd-networkd[1585]: cali3ac89f0cc46: Gained IPv6LL Nov 1 00:44:11.237449 env[1431]: time="2025-11-01T00:44:11.237395675Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:44:11.376000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=525666 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:11.376000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0086d5170 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:44:11.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:44:11.505001 env[1431]: time="2025-11-01T00:44:11.504768225Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:11.509027 env[1431]: time="2025-11-01T00:44:11.508885556Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:44:11.509470 kubelet[2441]: E1101 00:44:11.509344 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:44:11.510062 kubelet[2441]: E1101 00:44:11.509470 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:44:11.510062 kubelet[2441]: E1101 00:44:11.509768 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:5fe78d67b676468e944c4add0cb5e7ce,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-kq5hc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5b6fd5995d-bq9rw_calico-system(114fdca3-3bbe-4894-af68-80fba407dd24): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:11.512404 env[1431]: time="2025-11-01T00:44:11.512370683Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:44:11.517000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:11.517000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0086d5320 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:44:11.517000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:44:11.518000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:11.518000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0071edda0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:44:11.518000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:44:11.518000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:11.518000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00667a2a0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:44:11.518000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:44:11.518000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:11.518000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0071edde0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:44:11.518000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:44:11.518000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=525660 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:11.518000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0086d5380 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:44:11.518000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:44:11.781622 env[1431]: time="2025-11-01T00:44:11.781449146Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:11.784292 env[1431]: time="2025-11-01T00:44:11.784234868Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:44:11.784710 kubelet[2441]: E1101 00:44:11.784664 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:44:11.784840 kubelet[2441]: E1101 00:44:11.784727 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:44:11.784954 kubelet[2441]: E1101 00:44:11.784896 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kq5hc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5b6fd5995d-bq9rw_calico-system(114fdca3-3bbe-4894-af68-80fba407dd24): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:11.786344 kubelet[2441]: E1101 00:44:11.786286 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:44:12.082000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:12.082000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0036a9ad0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:12.082000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:12.086000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:12.086000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0002e5ac0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:12.086000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:16.211416 env[1431]: time="2025-11-01T00:44:16.211362882Z" level=info msg="StopPodSandbox for \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\"" Nov 1 00:44:16.243559 env[1431]: time="2025-11-01T00:44:16.242815810Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.251 [WARNING][4713] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"31c65c5c-1a06-4110-b81b-98d3530e65c1", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797", Pod:"goldmane-666569f655-cpllc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.120.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0d238fef447", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.254 [INFO][4713] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.254 [INFO][4713] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" iface="eth0" netns="" Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.254 [INFO][4713] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.254 [INFO][4713] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.277 [INFO][4722] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.277 [INFO][4722] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.277 [INFO][4722] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.283 [WARNING][4722] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.284 [INFO][4722] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.285 [INFO][4722] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.287893 env[1431]: 2025-11-01 00:44:16.286 [INFO][4713] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:16.288509 env[1431]: time="2025-11-01T00:44:16.287927037Z" level=info msg="TearDown network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\" successfully" Nov 1 00:44:16.288509 env[1431]: time="2025-11-01T00:44:16.287968038Z" level=info msg="StopPodSandbox for \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\" returns successfully" Nov 1 00:44:16.288842 env[1431]: time="2025-11-01T00:44:16.288808044Z" level=info msg="RemovePodSandbox for \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\"" Nov 1 00:44:16.288979 env[1431]: time="2025-11-01T00:44:16.288847244Z" level=info msg="Forcibly stopping sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\"" Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.334 [WARNING][4737] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"31c65c5c-1a06-4110-b81b-98d3530e65c1", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"583ac406fb2165f34ee3958af2bb23d9dc202cd43281e198cd71e913a8c3f797", Pod:"goldmane-666569f655-cpllc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.120.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0d238fef447", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.334 [INFO][4737] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.334 [INFO][4737] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" iface="eth0" netns="" Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.334 [INFO][4737] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.334 [INFO][4737] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.360 [INFO][4744] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.361 [INFO][4744] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.361 [INFO][4744] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.366 [WARNING][4744] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.366 [INFO][4744] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" HandleID="k8s-pod-network.8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Workload="ci--3510.3.8--n--9f29a8c334-k8s-goldmane--666569f655--cpllc-eth0" Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.367 [INFO][4744] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.369970 env[1431]: 2025-11-01 00:44:16.368 [INFO][4737] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9" Nov 1 00:44:16.370713 env[1431]: time="2025-11-01T00:44:16.370013533Z" level=info msg="TearDown network for sandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\" successfully" Nov 1 00:44:16.384653 env[1431]: time="2025-11-01T00:44:16.384609339Z" level=info msg="RemovePodSandbox \"8f0dae84b494456619e313f3595cc847de70b4ea0fa58cd9faef3740dfcd1ed9\" returns successfully" Nov 1 00:44:16.385204 env[1431]: time="2025-11-01T00:44:16.385171643Z" level=info msg="StopPodSandbox for \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\"" Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.417 [WARNING][4758] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0", GenerateName:"calico-apiserver-56df8c5d4b-", Namespace:"calico-apiserver", SelfLink:"", UID:"c4fa1769-b5ef-44fb-bb2e-c91531ca49da", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56df8c5d4b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01", Pod:"calico-apiserver-56df8c5d4b-65nv4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibbf12b8e13d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.417 [INFO][4758] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.417 [INFO][4758] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" iface="eth0" netns="" Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.417 [INFO][4758] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.417 [INFO][4758] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.452 [INFO][4765] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.453 [INFO][4765] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.453 [INFO][4765] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.459 [WARNING][4765] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.459 [INFO][4765] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.460 [INFO][4765] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.464024 env[1431]: 2025-11-01 00:44:16.462 [INFO][4758] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:16.464584 env[1431]: time="2025-11-01T00:44:16.464530919Z" level=info msg="TearDown network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\" successfully" Nov 1 00:44:16.464662 env[1431]: time="2025-11-01T00:44:16.464645520Z" level=info msg="StopPodSandbox for \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\" returns successfully" Nov 1 00:44:16.465072 env[1431]: time="2025-11-01T00:44:16.465018823Z" level=info msg="RemovePodSandbox for \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\"" Nov 1 00:44:16.465227 env[1431]: time="2025-11-01T00:44:16.465182224Z" level=info msg="Forcibly stopping sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\"" Nov 1 00:44:16.505114 env[1431]: time="2025-11-01T00:44:16.505064113Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:16.508622 env[1431]: time="2025-11-01T00:44:16.508541339Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:44:16.508982 kubelet[2441]: E1101 00:44:16.508941 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:16.509358 kubelet[2441]: E1101 00:44:16.508992 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:16.509358 kubelet[2441]: E1101 00:44:16.509161 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-78pww,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-56df8c5d4b-rfbnt_calico-apiserver(4c3c0e0e-07f0-4e99-8395-721e399f588a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:16.510499 kubelet[2441]: E1101 00:44:16.510444 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.496 [WARNING][4779] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0", GenerateName:"calico-apiserver-56df8c5d4b-", Namespace:"calico-apiserver", SelfLink:"", UID:"c4fa1769-b5ef-44fb-bb2e-c91531ca49da", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56df8c5d4b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"09d2c9cb22d5f4b91b11d38b61ce2f4164bbe9bb7a288b6967ddf2f144f7be01", Pod:"calico-apiserver-56df8c5d4b-65nv4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibbf12b8e13d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.498 [INFO][4779] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.498 [INFO][4779] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" iface="eth0" netns="" Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.498 [INFO][4779] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.498 [INFO][4779] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.523 [INFO][4786] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.524 [INFO][4786] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.524 [INFO][4786] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.529 [WARNING][4786] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.529 [INFO][4786] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" HandleID="k8s-pod-network.997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--65nv4-eth0" Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.532 [INFO][4786] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.534611 env[1431]: 2025-11-01 00:44:16.533 [INFO][4779] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a" Nov 1 00:44:16.535280 env[1431]: time="2025-11-01T00:44:16.534643428Z" level=info msg="TearDown network for sandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\" successfully" Nov 1 00:44:16.542346 env[1431]: time="2025-11-01T00:44:16.542308284Z" level=info msg="RemovePodSandbox \"997e3dbb6f0b7c7aa2a00ea37e5737eac09c52d6e06b2ac3fcde6a202c09143a\" returns successfully" Nov 1 00:44:16.542747 env[1431]: time="2025-11-01T00:44:16.542721587Z" level=info msg="StopPodSandbox for \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\"" Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.573 [WARNING][4801] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"687a4ecc-224e-4643-b429-c02add92af85", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83", Pod:"coredns-674b8bbfcf-jfx7f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0beb186813a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.574 [INFO][4801] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.574 [INFO][4801] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" iface="eth0" netns="" Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.574 [INFO][4801] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.574 [INFO][4801] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.599 [INFO][4808] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.599 [INFO][4808] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.599 [INFO][4808] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.605 [WARNING][4808] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.605 [INFO][4808] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.607 [INFO][4808] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.609366 env[1431]: 2025-11-01 00:44:16.608 [INFO][4801] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:16.610041 env[1431]: time="2025-11-01T00:44:16.609390570Z" level=info msg="TearDown network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\" successfully" Nov 1 00:44:16.610041 env[1431]: time="2025-11-01T00:44:16.609428771Z" level=info msg="StopPodSandbox for \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\" returns successfully" Nov 1 00:44:16.610041 env[1431]: time="2025-11-01T00:44:16.609956975Z" level=info msg="RemovePodSandbox for \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\"" Nov 1 00:44:16.610041 env[1431]: time="2025-11-01T00:44:16.609995175Z" level=info msg="Forcibly stopping sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\"" Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.640 [WARNING][4822] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"687a4ecc-224e-4643-b429-c02add92af85", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"632b4c71438ce7e3d581129000de897bb1bedb73ecaddd44b5c7bf8eca9f0f83", Pod:"coredns-674b8bbfcf-jfx7f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0beb186813a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.641 [INFO][4822] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.641 [INFO][4822] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" iface="eth0" netns="" Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.641 [INFO][4822] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.641 [INFO][4822] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.662 [INFO][4829] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.662 [INFO][4829] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.662 [INFO][4829] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.668 [WARNING][4829] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.668 [INFO][4829] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" HandleID="k8s-pod-network.10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--jfx7f-eth0" Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.669 [INFO][4829] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.671910 env[1431]: 2025-11-01 00:44:16.670 [INFO][4822] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4" Nov 1 00:44:16.672601 env[1431]: time="2025-11-01T00:44:16.671934224Z" level=info msg="TearDown network for sandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\" successfully" Nov 1 00:44:16.679465 env[1431]: time="2025-11-01T00:44:16.679416079Z" level=info msg="RemovePodSandbox \"10775550f983e978c2074f8cbf92ed1544b3550596da0eb9c62819e083cfc1b4\" returns successfully" Nov 1 00:44:16.680028 env[1431]: time="2025-11-01T00:44:16.679988683Z" level=info msg="StopPodSandbox for \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\"" Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.711 [WARNING][4843] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0", GenerateName:"calico-kube-controllers-578795468d-", Namespace:"calico-system", SelfLink:"", UID:"c8835bb5-2375-444c-85bc-4149b7d50cd0", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"578795468d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102", Pod:"calico-kube-controllers-578795468d-6l946", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.120.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6a22b1e03bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.711 [INFO][4843] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.711 [INFO][4843] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" iface="eth0" netns="" Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.711 [INFO][4843] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.711 [INFO][4843] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.731 [INFO][4850] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.731 [INFO][4850] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.731 [INFO][4850] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.738 [WARNING][4850] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.738 [INFO][4850] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.739 [INFO][4850] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.743805 env[1431]: 2025-11-01 00:44:16.740 [INFO][4843] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:16.743805 env[1431]: time="2025-11-01T00:44:16.741851432Z" level=info msg="TearDown network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\" successfully" Nov 1 00:44:16.743805 env[1431]: time="2025-11-01T00:44:16.741891532Z" level=info msg="StopPodSandbox for \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\" returns successfully" Nov 1 00:44:16.744580 env[1431]: time="2025-11-01T00:44:16.744522951Z" level=info msg="RemovePodSandbox for \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\"" Nov 1 00:44:16.744676 env[1431]: time="2025-11-01T00:44:16.744620752Z" level=info msg="Forcibly stopping sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\"" Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.775 [WARNING][4864] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0", GenerateName:"calico-kube-controllers-578795468d-", Namespace:"calico-system", SelfLink:"", UID:"c8835bb5-2375-444c-85bc-4149b7d50cd0", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"578795468d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"6cdf9a69ab6a620a13459203b747ef18f4cce6c2cc2bf5ce02760f62e32a0102", Pod:"calico-kube-controllers-578795468d-6l946", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.120.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali6a22b1e03bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.775 [INFO][4864] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.775 [INFO][4864] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" iface="eth0" netns="" Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.775 [INFO][4864] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.776 [INFO][4864] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.795 [INFO][4871] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.795 [INFO][4871] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.795 [INFO][4871] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.801 [WARNING][4871] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.801 [INFO][4871] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" HandleID="k8s-pod-network.b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--kube--controllers--578795468d--6l946-eth0" Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.802 [INFO][4871] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.804511 env[1431]: 2025-11-01 00:44:16.803 [INFO][4864] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415" Nov 1 00:44:16.805183 env[1431]: time="2025-11-01T00:44:16.804537687Z" level=info msg="TearDown network for sandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\" successfully" Nov 1 00:44:16.811792 env[1431]: time="2025-11-01T00:44:16.811757439Z" level=info msg="RemovePodSandbox \"b609e02768c373f7618f7ea6737fc070a770dae0881e6b9b951f273ce9120415\" returns successfully" Nov 1 00:44:16.812255 env[1431]: time="2025-11-01T00:44:16.812225343Z" level=info msg="StopPodSandbox for \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\"" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.844 [WARNING][4885] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.844 [INFO][4885] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.844 [INFO][4885] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" iface="eth0" netns="" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.844 [INFO][4885] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.844 [INFO][4885] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.866 [INFO][4892] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.866 [INFO][4892] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.866 [INFO][4892] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.873 [WARNING][4892] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.873 [INFO][4892] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.874 [INFO][4892] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.877057 env[1431]: 2025-11-01 00:44:16.875 [INFO][4885] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:44:16.877637 env[1431]: time="2025-11-01T00:44:16.877096613Z" level=info msg="TearDown network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\" successfully" Nov 1 00:44:16.877637 env[1431]: time="2025-11-01T00:44:16.877134814Z" level=info msg="StopPodSandbox for \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\" returns successfully" Nov 1 00:44:16.877733 env[1431]: time="2025-11-01T00:44:16.877695718Z" level=info msg="RemovePodSandbox for \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\"" Nov 1 00:44:16.877778 env[1431]: time="2025-11-01T00:44:16.877731318Z" level=info msg="Forcibly stopping sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\"" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.909 [WARNING][4906] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" WorkloadEndpoint="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.909 [INFO][4906] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.909 [INFO][4906] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" iface="eth0" netns="" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.909 [INFO][4906] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.909 [INFO][4906] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.929 [INFO][4914] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.929 [INFO][4914] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.930 [INFO][4914] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.935 [WARNING][4914] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.935 [INFO][4914] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" HandleID="k8s-pod-network.a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Workload="ci--3510.3.8--n--9f29a8c334-k8s-whisker--7bd5b8dfcb--j5hb6-eth0" Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.936 [INFO][4914] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:16.938665 env[1431]: 2025-11-01 00:44:16.937 [INFO][4906] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a" Nov 1 00:44:16.939302 env[1431]: time="2025-11-01T00:44:16.938692660Z" level=info msg="TearDown network for sandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\" successfully" Nov 1 00:44:16.945988 env[1431]: time="2025-11-01T00:44:16.945945913Z" level=info msg="RemovePodSandbox \"a56a5db84868d9c2e2aac66661aab371f747572670fbd7057ae2a989123ef89a\" returns successfully" Nov 1 00:44:16.946449 env[1431]: time="2025-11-01T00:44:16.946417716Z" level=info msg="StopPodSandbox for \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\"" Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:16.977 [WARNING][4928] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ce526820-d1dc-4357-9fb7-1cb0ce632942", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953", Pod:"csi-node-driver-9ksnm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.120.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali671bcaa7bc2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:16.978 [INFO][4928] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:16.978 [INFO][4928] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" iface="eth0" netns="" Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:16.978 [INFO][4928] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:16.978 [INFO][4928] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:16.997 [INFO][4935] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:16.997 [INFO][4935] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:16.998 [INFO][4935] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:17.003 [WARNING][4935] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:17.003 [INFO][4935] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:17.004 [INFO][4935] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:17.007657 env[1431]: 2025-11-01 00:44:17.005 [INFO][4928] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:17.007657 env[1431]: time="2025-11-01T00:44:17.006916955Z" level=info msg="TearDown network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\" successfully" Nov 1 00:44:17.007657 env[1431]: time="2025-11-01T00:44:17.006952855Z" level=info msg="StopPodSandbox for \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\" returns successfully" Nov 1 00:44:17.009701 env[1431]: time="2025-11-01T00:44:17.009669575Z" level=info msg="RemovePodSandbox for \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\"" Nov 1 00:44:17.009821 env[1431]: time="2025-11-01T00:44:17.009705475Z" level=info msg="Forcibly stopping sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\"" Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.041 [WARNING][4949] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ce526820-d1dc-4357-9fb7-1cb0ce632942", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"4f4f083ba4d447a0d080ab59166f80feac7dc036e1e676dd27ca66c85f273953", Pod:"csi-node-driver-9ksnm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.120.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali671bcaa7bc2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.041 [INFO][4949] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.041 [INFO][4949] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" iface="eth0" netns="" Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.041 [INFO][4949] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.041 [INFO][4949] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.063 [INFO][4956] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.063 [INFO][4956] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.063 [INFO][4956] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.073 [WARNING][4956] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.073 [INFO][4956] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" HandleID="k8s-pod-network.adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Workload="ci--3510.3.8--n--9f29a8c334-k8s-csi--node--driver--9ksnm-eth0" Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.074 [INFO][4956] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:17.077251 env[1431]: 2025-11-01 00:44:17.075 [INFO][4949] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5" Nov 1 00:44:17.078036 env[1431]: time="2025-11-01T00:44:17.077289061Z" level=info msg="TearDown network for sandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\" successfully" Nov 1 00:44:17.084209 env[1431]: time="2025-11-01T00:44:17.084163610Z" level=info msg="RemovePodSandbox \"adc232a3ec64e824b42b6733435c1e0e04ac1175db5aa2bcfc1f0a8eb618d3f5\" returns successfully" Nov 1 00:44:17.084763 env[1431]: time="2025-11-01T00:44:17.084733314Z" level=info msg="StopPodSandbox for \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\"" Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.115 [WARNING][4970] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0", GenerateName:"calico-apiserver-56df8c5d4b-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c3c0e0e-07f0-4e99-8395-721e399f588a", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56df8c5d4b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0", Pod:"calico-apiserver-56df8c5d4b-rfbnt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib1d958c89a5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.115 [INFO][4970] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.115 [INFO][4970] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" iface="eth0" netns="" Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.115 [INFO][4970] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.115 [INFO][4970] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.136 [INFO][4977] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.136 [INFO][4977] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.136 [INFO][4977] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.142 [WARNING][4977] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.142 [INFO][4977] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.144 [INFO][4977] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:17.146292 env[1431]: 2025-11-01 00:44:17.145 [INFO][4970] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:17.146858 env[1431]: time="2025-11-01T00:44:17.146348557Z" level=info msg="TearDown network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\" successfully" Nov 1 00:44:17.146858 env[1431]: time="2025-11-01T00:44:17.146393357Z" level=info msg="StopPodSandbox for \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\" returns successfully" Nov 1 00:44:17.147399 env[1431]: time="2025-11-01T00:44:17.147361264Z" level=info msg="RemovePodSandbox for \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\"" Nov 1 00:44:17.147532 env[1431]: time="2025-11-01T00:44:17.147401864Z" level=info msg="Forcibly stopping sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\"" Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.179 [WARNING][4991] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0", GenerateName:"calico-apiserver-56df8c5d4b-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c3c0e0e-07f0-4e99-8395-721e399f588a", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"56df8c5d4b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"c3dac5c58a0db60c1f289cbed3c453d8ff46d729c91e67794e1b4d96633425d0", Pod:"calico-apiserver-56df8c5d4b-rfbnt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.120.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib1d958c89a5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.179 [INFO][4991] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.179 [INFO][4991] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" iface="eth0" netns="" Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.179 [INFO][4991] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.179 [INFO][4991] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.202 [INFO][4998] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.202 [INFO][4998] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.202 [INFO][4998] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.209 [WARNING][4998] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.209 [INFO][4998] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" HandleID="k8s-pod-network.8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Workload="ci--3510.3.8--n--9f29a8c334-k8s-calico--apiserver--56df8c5d4b--rfbnt-eth0" Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.211 [INFO][4998] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:17.213395 env[1431]: 2025-11-01 00:44:17.212 [INFO][4991] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf" Nov 1 00:44:17.214296 env[1431]: time="2025-11-01T00:44:17.213426038Z" level=info msg="TearDown network for sandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\" successfully" Nov 1 00:44:17.224059 env[1431]: time="2025-11-01T00:44:17.223961714Z" level=info msg="RemovePodSandbox \"8fb43f221c5b7ee2ece975db955ae5ed5f74098f48d2c9e9dd69207b01e1bedf\" returns successfully" Nov 1 00:44:17.224843 env[1431]: time="2025-11-01T00:44:17.224816320Z" level=info msg="StopPodSandbox for \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\"" Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.257 [WARNING][5013] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"a1f1ab45-e8ff-47b7-b5f4-8707d57d8285", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1", Pod:"coredns-674b8bbfcf-n8ngt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3ac89f0cc46", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.258 [INFO][5013] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.258 [INFO][5013] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" iface="eth0" netns="" Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.258 [INFO][5013] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.258 [INFO][5013] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.282 [INFO][5020] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.282 [INFO][5020] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.282 [INFO][5020] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.288 [WARNING][5020] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.288 [INFO][5020] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.289 [INFO][5020] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:17.292953 env[1431]: 2025-11-01 00:44:17.290 [INFO][5013] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:17.293531 env[1431]: time="2025-11-01T00:44:17.293483514Z" level=info msg="TearDown network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\" successfully" Nov 1 00:44:17.293657 env[1431]: time="2025-11-01T00:44:17.293625615Z" level=info msg="StopPodSandbox for \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\" returns successfully" Nov 1 00:44:17.294141 env[1431]: time="2025-11-01T00:44:17.294109418Z" level=info msg="RemovePodSandbox for \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\"" Nov 1 00:44:17.294259 env[1431]: time="2025-11-01T00:44:17.294147118Z" level=info msg="Forcibly stopping sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\"" Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.326 [WARNING][5034] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"a1f1ab45-e8ff-47b7-b5f4-8707d57d8285", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 43, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9f29a8c334", ContainerID:"2043fef17be0561de85cd4cc9c7f6751f653c59875fe3552951717fa4dc81fa1", Pod:"coredns-674b8bbfcf-n8ngt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.120.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3ac89f0cc46", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.326 [INFO][5034] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.326 [INFO][5034] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" iface="eth0" netns="" Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.326 [INFO][5034] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.326 [INFO][5034] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.347 [INFO][5041] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.347 [INFO][5041] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.347 [INFO][5041] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.353 [WARNING][5041] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.353 [INFO][5041] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" HandleID="k8s-pod-network.bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Workload="ci--3510.3.8--n--9f29a8c334-k8s-coredns--674b8bbfcf--n8ngt-eth0" Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.354 [INFO][5041] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:44:17.357142 env[1431]: 2025-11-01 00:44:17.356 [INFO][5034] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6" Nov 1 00:44:17.357895 env[1431]: time="2025-11-01T00:44:17.357172171Z" level=info msg="TearDown network for sandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\" successfully" Nov 1 00:44:17.364681 env[1431]: time="2025-11-01T00:44:17.364638825Z" level=info msg="RemovePodSandbox \"bd37504504f8f15f49c6a05f659ba7a9c7a63dc19db64367b7a96409230dacd6\" returns successfully" Nov 1 00:44:18.238501 env[1431]: time="2025-11-01T00:44:18.238451684Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:44:18.502675 env[1431]: time="2025-11-01T00:44:18.502514862Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:18.506792 env[1431]: time="2025-11-01T00:44:18.506727892Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:44:18.507018 kubelet[2441]: E1101 00:44:18.506983 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:44:18.507442 kubelet[2441]: E1101 00:44:18.507030 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:44:18.507442 kubelet[2441]: E1101 00:44:18.507208 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2dxjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-578795468d-6l946_calico-system(c8835bb5-2375-444c-85bc-4149b7d50cd0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:18.508565 kubelet[2441]: E1101 00:44:18.508505 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:44:19.237881 env[1431]: time="2025-11-01T00:44:19.237834374Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:44:19.497163 env[1431]: time="2025-11-01T00:44:19.497008599Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:19.500120 env[1431]: time="2025-11-01T00:44:19.500051421Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:44:19.500413 kubelet[2441]: E1101 00:44:19.500370 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:44:19.500568 kubelet[2441]: E1101 00:44:19.500431 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:44:19.500856 env[1431]: time="2025-11-01T00:44:19.500826126Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:44:19.501262 kubelet[2441]: E1101 00:44:19.501199 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vn945,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:19.764287 env[1431]: time="2025-11-01T00:44:19.764144780Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:19.767411 env[1431]: time="2025-11-01T00:44:19.767281202Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:44:19.767750 kubelet[2441]: E1101 00:44:19.767683 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:44:19.768212 kubelet[2441]: E1101 00:44:19.767755 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:44:19.768283 env[1431]: time="2025-11-01T00:44:19.768173708Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:44:19.768705 kubelet[2441]: E1101 00:44:19.768616 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-zm5x4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-cpllc_calico-system(31c65c5c-1a06-4110-b81b-98d3530e65c1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:19.769858 kubelet[2441]: E1101 00:44:19.769811 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:44:20.028092 env[1431]: time="2025-11-01T00:44:20.027943936Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:20.030776 env[1431]: time="2025-11-01T00:44:20.030707955Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:44:20.031030 kubelet[2441]: E1101 00:44:20.030982 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:44:20.031137 kubelet[2441]: E1101 00:44:20.031039 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:44:20.031271 kubelet[2441]: E1101 00:44:20.031211 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vn945,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:20.032918 kubelet[2441]: E1101 00:44:20.032861 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:44:20.236824 env[1431]: time="2025-11-01T00:44:20.236772892Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:44:20.375000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:20.380472 kernel: kauditd_printk_skb: 146 callbacks suppressed Nov 1 00:44:20.380596 kernel: audit: type=1400 audit(1761957860.375:1317): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:20.375000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:20.409749 kernel: audit: type=1400 audit(1761957860.375:1318): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:20.375000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00227e6e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:20.430178 kernel: audit: type=1300 audit(1761957860.375:1318): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00227e6e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:20.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:20.375000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:20.463212 kernel: audit: type=1327 audit(1761957860.375:1318): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:20.463279 kernel: audit: type=1400 audit(1761957860.375:1319): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:20.463320 kernel: audit: type=1300 audit(1761957860.375:1319): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00227e700 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:20.375000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00227e700 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:20.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:20.499785 kernel: audit: type=1327 audit(1761957860.375:1319): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:20.376000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:20.500648 kernel: audit: type=1400 audit(1761957860.376:1320): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:44:20.500949 env[1431]: time="2025-11-01T00:44:20.500777333Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:20.376000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00227e720 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:20.536648 kernel: audit: type=1300 audit(1761957860.376:1320): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00227e720 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:20.536998 env[1431]: time="2025-11-01T00:44:20.536812184Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:44:20.537334 kubelet[2441]: E1101 00:44:20.537284 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:20.537491 kubelet[2441]: E1101 00:44:20.537465 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:20.537636 kernel: audit: type=1327 audit(1761957860.376:1320): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:20.376000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:20.537915 kubelet[2441]: E1101 00:44:20.537865 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-h4s8q,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-56df8c5d4b-65nv4_calico-apiserver(c4fa1769-b5ef-44fb-bb2e-c91531ca49da): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:20.539414 kubelet[2441]: E1101 00:44:20.539378 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:44:20.375000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0035dad80 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:44:20.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:44:24.238835 kubelet[2441]: E1101 00:44:24.238662 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:44:30.122178 systemd[1]: run-containerd-runc-k8s.io-5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591-runc.Ryr3Ya.mount: Deactivated successfully. Nov 1 00:44:30.238022 kubelet[2441]: E1101 00:44:30.237974 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:44:31.236923 kubelet[2441]: E1101 00:44:31.236855 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:44:33.237416 kubelet[2441]: E1101 00:44:33.237362 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:44:33.238175 kubelet[2441]: E1101 00:44:33.238129 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:44:35.238308 kubelet[2441]: E1101 00:44:35.238262 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:44:35.239581 env[1431]: time="2025-11-01T00:44:35.239254876Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:44:35.499776 env[1431]: time="2025-11-01T00:44:35.499639085Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:35.502871 env[1431]: time="2025-11-01T00:44:35.502814504Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:44:35.503075 kubelet[2441]: E1101 00:44:35.503035 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:44:35.503170 kubelet[2441]: E1101 00:44:35.503088 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:44:35.503279 kubelet[2441]: E1101 00:44:35.503245 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:5fe78d67b676468e944c4add0cb5e7ce,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-kq5hc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5b6fd5995d-bq9rw_calico-system(114fdca3-3bbe-4894-af68-80fba407dd24): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:35.506036 env[1431]: time="2025-11-01T00:44:35.505764422Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:44:35.784363 env[1431]: time="2025-11-01T00:44:35.784190142Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:35.800258 env[1431]: time="2025-11-01T00:44:35.800194941Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:44:35.800617 kubelet[2441]: E1101 00:44:35.800576 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:44:35.800757 kubelet[2441]: E1101 00:44:35.800631 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:44:35.800837 kubelet[2441]: E1101 00:44:35.800789 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kq5hc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5b6fd5995d-bq9rw_calico-system(114fdca3-3bbe-4894-af68-80fba407dd24): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:35.802760 kubelet[2441]: E1101 00:44:35.802700 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:44:43.238136 env[1431]: time="2025-11-01T00:44:43.237656043Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:44:43.500058 env[1431]: time="2025-11-01T00:44:43.499905086Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:43.508926 env[1431]: time="2025-11-01T00:44:43.508847539Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:44:43.509309 kubelet[2441]: E1101 00:44:43.509260 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:44:43.509713 kubelet[2441]: E1101 00:44:43.509337 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:44:43.509713 kubelet[2441]: E1101 00:44:43.509587 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-zm5x4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-cpllc_calico-system(31c65c5c-1a06-4110-b81b-98d3530e65c1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:43.511179 kubelet[2441]: E1101 00:44:43.511124 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:44:44.237137 env[1431]: time="2025-11-01T00:44:44.237091217Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:44:44.493771 env[1431]: time="2025-11-01T00:44:44.493463517Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:44.497042 env[1431]: time="2025-11-01T00:44:44.496901737Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:44:44.497408 kubelet[2441]: E1101 00:44:44.497352 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:44:44.497543 kubelet[2441]: E1101 00:44:44.497422 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:44:44.497678 kubelet[2441]: E1101 00:44:44.497617 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2dxjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-578795468d-6l946_calico-system(c8835bb5-2375-444c-85bc-4149b7d50cd0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:44.499004 kubelet[2441]: E1101 00:44:44.498959 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:44:45.238420 env[1431]: time="2025-11-01T00:44:45.238368570Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:44:45.498244 env[1431]: time="2025-11-01T00:44:45.498074382Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:45.502798 env[1431]: time="2025-11-01T00:44:45.502736109Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:44:45.503031 kubelet[2441]: E1101 00:44:45.502992 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:45.503384 kubelet[2441]: E1101 00:44:45.503044 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:45.503384 kubelet[2441]: E1101 00:44:45.503224 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-78pww,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-56df8c5d4b-rfbnt_calico-apiserver(4c3c0e0e-07f0-4e99-8395-721e399f588a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:45.504793 kubelet[2441]: E1101 00:44:45.504756 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:44:46.239400 env[1431]: time="2025-11-01T00:44:46.239353091Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:44:46.498919 env[1431]: time="2025-11-01T00:44:46.498780994Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:46.503422 env[1431]: time="2025-11-01T00:44:46.503355520Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:44:46.503753 kubelet[2441]: E1101 00:44:46.503705 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:44:46.504093 kubelet[2441]: E1101 00:44:46.503779 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:44:46.504598 kubelet[2441]: E1101 00:44:46.504520 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vn945,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:46.507245 env[1431]: time="2025-11-01T00:44:46.506864841Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:44:46.773896 env[1431]: time="2025-11-01T00:44:46.773732586Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:46.779726 env[1431]: time="2025-11-01T00:44:46.779657621Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:44:46.779944 kubelet[2441]: E1101 00:44:46.779898 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:44:46.780041 kubelet[2441]: E1101 00:44:46.779962 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:44:46.780220 kubelet[2441]: E1101 00:44:46.780160 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vn945,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:46.781822 kubelet[2441]: E1101 00:44:46.781762 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:44:47.238004 kubelet[2441]: E1101 00:44:47.237949 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:44:48.239779 env[1431]: time="2025-11-01T00:44:48.239398134Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:44:48.516281 env[1431]: time="2025-11-01T00:44:48.515912621Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:44:48.519263 env[1431]: time="2025-11-01T00:44:48.519188439Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:44:48.519483 kubelet[2441]: E1101 00:44:48.519448 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:48.519890 kubelet[2441]: E1101 00:44:48.519495 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:44:48.519890 kubelet[2441]: E1101 00:44:48.519675 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-h4s8q,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-56df8c5d4b-65nv4_calico-apiserver(c4fa1769-b5ef-44fb-bb2e-c91531ca49da): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:44:48.521324 kubelet[2441]: E1101 00:44:48.521284 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:44:55.237011 kubelet[2441]: E1101 00:44:55.236945 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:44:57.236858 kubelet[2441]: E1101 00:44:57.236809 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:44:58.238935 kubelet[2441]: E1101 00:44:58.238890 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:45:00.127214 systemd[1]: run-containerd-runc-k8s.io-5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591-runc.h3ce45.mount: Deactivated successfully. Nov 1 00:45:01.237980 kubelet[2441]: E1101 00:45:01.237917 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:45:02.239434 kubelet[2441]: E1101 00:45:02.239384 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:45:03.236544 kubelet[2441]: E1101 00:45:03.236493 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:45:06.238325 kubelet[2441]: E1101 00:45:06.237995 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.502657 1418 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.502701 1418 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.502851 1418 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.503358 1418 omaha_request_params.cc:62] Current group set to lts Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.503527 1418 update_attempter.cc:499] Already updated boot flags. Skipping. Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.503535 1418 update_attempter.cc:643] Scheduling an action processor start. Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.503568 1418 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.503605 1418 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.503676 1418 omaha_request_action.cc:270] Posting an Omaha request to disabled Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.503681 1418 omaha_request_action.cc:271] Request: Nov 1 00:45:07.503758 update_engine[1418]: Nov 1 00:45:07.503758 update_engine[1418]: Nov 1 00:45:07.503758 update_engine[1418]: Nov 1 00:45:07.503758 update_engine[1418]: Nov 1 00:45:07.503758 update_engine[1418]: Nov 1 00:45:07.503758 update_engine[1418]: Nov 1 00:45:07.503758 update_engine[1418]: Nov 1 00:45:07.503758 update_engine[1418]: Nov 1 00:45:07.503758 update_engine[1418]: I1101 00:45:07.503687 1418 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:45:07.505039 locksmithd[1512]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Nov 1 00:45:07.610783 update_engine[1418]: I1101 00:45:07.610734 1418 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:45:07.611056 update_engine[1418]: I1101 00:45:07.611028 1418 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:45:07.634706 update_engine[1418]: E1101 00:45:07.634670 1418 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:45:07.634863 update_engine[1418]: I1101 00:45:07.634784 1418 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Nov 1 00:45:09.237843 kubelet[2441]: E1101 00:45:09.237329 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:45:11.237495 kubelet[2441]: E1101 00:45:11.237444 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:45:11.388592 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:45:11.388748 kernel: audit: type=1400 audit(1761957911.377:1321): avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=525666 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.377000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=525666 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.377000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0152b0780 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.420088 kernel: audit: type=1300 audit(1761957911.377:1321): arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0152b0780 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:11.438569 kernel: audit: type=1327 audit(1761957911.377:1321): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:11.518000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.537577 kernel: audit: type=1400 audit(1761957911.518:1322): avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.518000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0065590a0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.561585 kernel: audit: type=1300 audit(1761957911.518:1322): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0065590a0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.518000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:11.579575 kernel: audit: type=1327 audit(1761957911.518:1322): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:11.537000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.537000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0087618c0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.621874 kernel: audit: type=1400 audit(1761957911.537:1323): avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.622008 kernel: audit: type=1300 audit(1761957911.537:1323): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0087618c0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.622047 kernel: audit: type=1327 audit(1761957911.537:1323): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:11.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:11.537000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.659286 kernel: audit: type=1400 audit(1761957911.537:1324): avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.537000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c008761bc0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:11.537000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=525660 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.537000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c008761c50 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:11.538000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:11.538000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c007a4da60 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:45:11.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:45:12.084000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:12.084000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e66a20 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:12.084000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:12.087000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:12.087000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00039d320 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:12.087000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:13.238525 kubelet[2441]: E1101 00:45:13.238465 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:45:15.237922 kubelet[2441]: E1101 00:45:15.237870 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:45:17.451537 update_engine[1418]: I1101 00:45:17.451484 1418 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:45:17.452083 update_engine[1418]: I1101 00:45:17.451809 1418 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:45:17.452083 update_engine[1418]: I1101 00:45:17.452049 1418 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:45:17.472245 update_engine[1418]: E1101 00:45:17.472205 1418 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:45:17.472406 update_engine[1418]: I1101 00:45:17.472329 1418 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Nov 1 00:45:18.241246 kubelet[2441]: E1101 00:45:18.241196 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:45:20.238916 kubelet[2441]: E1101 00:45:20.238867 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:45:20.375000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:20.381431 kernel: kauditd_printk_skb: 14 callbacks suppressed Nov 1 00:45:20.381562 kernel: audit: type=1400 audit(1761957920.375:1329): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:20.375000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:20.415726 kernel: audit: type=1400 audit(1761957920.375:1330): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:20.375000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000105ce0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:20.439910 kernel: audit: type=1300 audit(1761957920.375:1330): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000105ce0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:20.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:20.375000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:20.473036 kernel: audit: type=1327 audit(1761957920.375:1330): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:20.473138 kernel: audit: type=1400 audit(1761957920.375:1331): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:20.473177 kernel: audit: type=1300 audit(1761957920.375:1331): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000105d60 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:20.375000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000105d60 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:20.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:20.494573 kernel: audit: type=1327 audit(1761957920.375:1331): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:20.379000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:20.525581 kernel: audit: type=1400 audit(1761957920.379:1332): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:45:20.529516 kernel: audit: type=1300 audit(1761957920.379:1332): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f66780 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:20.379000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f66780 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:20.379000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:20.565961 kernel: audit: type=1327 audit(1761957920.379:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:20.375000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000105c60 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:45:20.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:45:23.237522 kubelet[2441]: E1101 00:45:23.237475 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:45:23.238056 kubelet[2441]: E1101 00:45:23.237956 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:45:25.237583 kubelet[2441]: E1101 00:45:25.237523 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:45:27.237856 env[1431]: time="2025-11-01T00:45:27.237784503Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:45:27.454498 update_engine[1418]: I1101 00:45:27.454432 1418 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:45:27.455056 update_engine[1418]: I1101 00:45:27.454771 1418 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:45:27.455056 update_engine[1418]: I1101 00:45:27.455027 1418 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:45:27.473630 update_engine[1418]: E1101 00:45:27.473472 1418 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:45:27.473630 update_engine[1418]: I1101 00:45:27.473600 1418 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Nov 1 00:45:27.498451 env[1431]: time="2025-11-01T00:45:27.498188569Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:45:27.505129 env[1431]: time="2025-11-01T00:45:27.504979637Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:45:27.505705 kubelet[2441]: E1101 00:45:27.505588 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:45:27.506161 kubelet[2441]: E1101 00:45:27.505709 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:45:27.506161 kubelet[2441]: E1101 00:45:27.505930 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:5fe78d67b676468e944c4add0cb5e7ce,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-kq5hc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5b6fd5995d-bq9rw_calico-system(114fdca3-3bbe-4894-af68-80fba407dd24): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:45:27.508387 env[1431]: time="2025-11-01T00:45:27.508357370Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:45:27.764275 env[1431]: time="2025-11-01T00:45:27.764135753Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:45:27.767358 env[1431]: time="2025-11-01T00:45:27.767274577Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:45:27.767625 kubelet[2441]: E1101 00:45:27.767576 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:45:27.767728 kubelet[2441]: E1101 00:45:27.767645 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:45:27.767852 kubelet[2441]: E1101 00:45:27.767801 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kq5hc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5b6fd5995d-bq9rw_calico-system(114fdca3-3bbe-4894-af68-80fba407dd24): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:45:27.769449 kubelet[2441]: E1101 00:45:27.769380 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:45:30.127057 systemd[1]: run-containerd-runc-k8s.io-5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591-runc.q7M6bZ.mount: Deactivated successfully. Nov 1 00:45:32.237259 env[1431]: time="2025-11-01T00:45:32.237212665Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:45:32.499400 env[1431]: time="2025-11-01T00:45:32.499254326Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:45:32.503180 env[1431]: time="2025-11-01T00:45:32.503103270Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:45:32.503477 kubelet[2441]: E1101 00:45:32.503433 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:45:32.503871 kubelet[2441]: E1101 00:45:32.503505 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:45:32.503871 kubelet[2441]: E1101 00:45:32.503737 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-h4s8q,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-56df8c5d4b-65nv4_calico-apiserver(c4fa1769-b5ef-44fb-bb2e-c91531ca49da): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:45:32.505471 kubelet[2441]: E1101 00:45:32.505415 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:45:33.237836 env[1431]: time="2025-11-01T00:45:33.237780637Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:45:33.518016 env[1431]: time="2025-11-01T00:45:33.517899855Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:45:33.521467 env[1431]: time="2025-11-01T00:45:33.521389384Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:45:33.521799 kubelet[2441]: E1101 00:45:33.521751 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:45:33.522156 kubelet[2441]: E1101 00:45:33.521816 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:45:33.522156 kubelet[2441]: E1101 00:45:33.522007 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2dxjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-578795468d-6l946_calico-system(c8835bb5-2375-444c-85bc-4149b7d50cd0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:45:33.523622 kubelet[2441]: E1101 00:45:33.523582 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:45:33.989313 systemd[1]: Started sshd@7-10.200.4.5:22-10.200.16.10:43264.service. Nov 1 00:45:33.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.4.5:22-10.200.16.10:43264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:33.996625 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:45:33.996718 kernel: audit: type=1130 audit(1761957933.989:1333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.4.5:22-10.200.16.10:43264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:34.240594 env[1431]: time="2025-11-01T00:45:34.240535876Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:45:34.615000 audit[5158]: USER_ACCT pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:34.617034 sshd[5158]: Accepted publickey for core from 10.200.16.10 port 43264 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:45:34.634384 sshd[5158]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:45:34.634732 kernel: audit: type=1101 audit(1761957934.615:1334): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:34.633000 audit[5158]: CRED_ACQ pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:34.642254 systemd[1]: Started session-10.scope. Nov 1 00:45:34.643387 systemd-logind[1417]: New session 10 of user core. Nov 1 00:45:34.656475 kernel: audit: type=1103 audit(1761957934.633:1335): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:34.656589 env[1431]: time="2025-11-01T00:45:34.655600695Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:45:34.659296 env[1431]: time="2025-11-01T00:45:34.658751010Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:45:34.659406 kubelet[2441]: E1101 00:45:34.659019 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:45:34.659406 kubelet[2441]: E1101 00:45:34.659075 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:45:34.659406 kubelet[2441]: E1101 00:45:34.659326 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-zm5x4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-cpllc_calico-system(31c65c5c-1a06-4110-b81b-98d3530e65c1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:45:34.660665 env[1431]: time="2025-11-01T00:45:34.660091359Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:45:34.661628 kubelet[2441]: E1101 00:45:34.660426 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:45:34.674566 kernel: audit: type=1006 audit(1761957934.633:1336): pid=5158 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:45:34.633000 audit[5158]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9f4200c0 a2=3 a3=0 items=0 ppid=1 pid=5158 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:34.693088 kernel: audit: type=1300 audit(1761957934.633:1336): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9f4200c0 a2=3 a3=0 items=0 ppid=1 pid=5158 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:34.633000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:34.700570 kernel: audit: type=1327 audit(1761957934.633:1336): proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:34.655000 audit[5158]: USER_START pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:34.720567 kernel: audit: type=1105 audit(1761957934.655:1337): pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:34.657000 audit[5160]: CRED_ACQ pid=5160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:34.739576 kernel: audit: type=1103 audit(1761957934.657:1338): pid=5160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:34.950081 env[1431]: time="2025-11-01T00:45:34.950022120Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:45:34.953644 env[1431]: time="2025-11-01T00:45:34.953576349Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:45:34.954124 kubelet[2441]: E1101 00:45:34.954071 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:45:34.954336 kubelet[2441]: E1101 00:45:34.954281 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:45:34.954679 kubelet[2441]: E1101 00:45:34.954616 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-78pww,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-56df8c5d4b-rfbnt_calico-apiserver(4c3c0e0e-07f0-4e99-8395-721e399f588a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:45:34.956486 kubelet[2441]: E1101 00:45:34.956422 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:45:35.174634 sshd[5158]: pam_unix(sshd:session): session closed for user core Nov 1 00:45:35.175000 audit[5158]: USER_END pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:35.177821 systemd-logind[1417]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:45:35.179203 systemd[1]: sshd@7-10.200.4.5:22-10.200.16.10:43264.service: Deactivated successfully. Nov 1 00:45:35.179970 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:45:35.181496 systemd-logind[1417]: Removed session 10. Nov 1 00:45:35.198573 kernel: audit: type=1106 audit(1761957935.175:1339): pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:35.198678 kernel: audit: type=1104 audit(1761957935.175:1340): pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:35.175000 audit[5158]: CRED_DISP pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:35.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.4.5:22-10.200.16.10:43264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:37.446517 update_engine[1418]: I1101 00:45:37.445950 1418 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:45:37.446517 update_engine[1418]: I1101 00:45:37.446236 1418 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:45:37.446517 update_engine[1418]: I1101 00:45:37.446466 1418 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:45:37.487042 update_engine[1418]: E1101 00:45:37.486997 1418 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:45:37.487241 update_engine[1418]: I1101 00:45:37.487130 1418 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Nov 1 00:45:37.487241 update_engine[1418]: I1101 00:45:37.487142 1418 omaha_request_action.cc:621] Omaha request response: Nov 1 00:45:37.487241 update_engine[1418]: E1101 00:45:37.487233 1418 omaha_request_action.cc:640] Omaha request network transfer failed. Nov 1 00:45:37.487381 update_engine[1418]: I1101 00:45:37.487249 1418 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Nov 1 00:45:37.487381 update_engine[1418]: I1101 00:45:37.487253 1418 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Nov 1 00:45:37.487381 update_engine[1418]: I1101 00:45:37.487258 1418 update_attempter.cc:306] Processing Done. Nov 1 00:45:37.487381 update_engine[1418]: E1101 00:45:37.487272 1418 update_attempter.cc:619] Update failed. Nov 1 00:45:37.487381 update_engine[1418]: I1101 00:45:37.487277 1418 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Nov 1 00:45:37.487381 update_engine[1418]: I1101 00:45:37.487282 1418 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Nov 1 00:45:37.487381 update_engine[1418]: I1101 00:45:37.487289 1418 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Nov 1 00:45:37.487381 update_engine[1418]: I1101 00:45:37.487373 1418 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Nov 1 00:45:37.487733 update_engine[1418]: I1101 00:45:37.487399 1418 omaha_request_action.cc:270] Posting an Omaha request to disabled Nov 1 00:45:37.487733 update_engine[1418]: I1101 00:45:37.487404 1418 omaha_request_action.cc:271] Request: Nov 1 00:45:37.487733 update_engine[1418]: Nov 1 00:45:37.487733 update_engine[1418]: Nov 1 00:45:37.487733 update_engine[1418]: Nov 1 00:45:37.487733 update_engine[1418]: Nov 1 00:45:37.487733 update_engine[1418]: Nov 1 00:45:37.487733 update_engine[1418]: Nov 1 00:45:37.487733 update_engine[1418]: I1101 00:45:37.487411 1418 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:45:37.487733 update_engine[1418]: I1101 00:45:37.487640 1418 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:45:37.488092 update_engine[1418]: I1101 00:45:37.487843 1418 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:45:37.488330 locksmithd[1512]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Nov 1 00:45:37.495419 update_engine[1418]: E1101 00:45:37.495169 1418 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:45:37.495419 update_engine[1418]: I1101 00:45:37.495280 1418 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Nov 1 00:45:37.495419 update_engine[1418]: I1101 00:45:37.495291 1418 omaha_request_action.cc:621] Omaha request response: Nov 1 00:45:37.495419 update_engine[1418]: I1101 00:45:37.495297 1418 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Nov 1 00:45:37.495419 update_engine[1418]: I1101 00:45:37.495302 1418 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Nov 1 00:45:37.495419 update_engine[1418]: I1101 00:45:37.495306 1418 update_attempter.cc:306] Processing Done. Nov 1 00:45:37.495419 update_engine[1418]: I1101 00:45:37.495312 1418 update_attempter.cc:310] Error event sent. Nov 1 00:45:37.495419 update_engine[1418]: I1101 00:45:37.495322 1418 update_check_scheduler.cc:74] Next update check in 49m6s Nov 1 00:45:37.496063 locksmithd[1512]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Nov 1 00:45:38.239803 kubelet[2441]: E1101 00:45:38.239708 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:45:39.237046 env[1431]: time="2025-11-01T00:45:39.236988164Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:45:39.506204 env[1431]: time="2025-11-01T00:45:39.506037041Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:45:39.510502 env[1431]: time="2025-11-01T00:45:39.510426892Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:45:39.510755 kubelet[2441]: E1101 00:45:39.510714 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:45:39.511152 kubelet[2441]: E1101 00:45:39.510774 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:45:39.511152 kubelet[2441]: E1101 00:45:39.510940 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vn945,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:45:39.513684 env[1431]: time="2025-11-01T00:45:39.513651203Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:45:39.803194 env[1431]: time="2025-11-01T00:45:39.802697269Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:45:39.806012 env[1431]: time="2025-11-01T00:45:39.805951382Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:45:39.806404 kubelet[2441]: E1101 00:45:39.806352 2441 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:45:39.806530 kubelet[2441]: E1101 00:45:39.806408 2441 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:45:39.806657 kubelet[2441]: E1101 00:45:39.806598 2441 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vn945,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9ksnm_calico-system(ce526820-d1dc-4357-9fb7-1cb0ce632942): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:45:39.808054 kubelet[2441]: E1101 00:45:39.808015 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:45:40.281700 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:45:40.281822 kernel: audit: type=1130 audit(1761957940.274:1342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.4.5:22-10.200.16.10:45322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:40.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.4.5:22-10.200.16.10:45322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:40.275528 systemd[1]: Started sshd@8-10.200.4.5:22-10.200.16.10:45322.service. Nov 1 00:45:40.889000 audit[5185]: USER_ACCT pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:40.910625 kernel: audit: type=1101 audit(1761957940.889:1343): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:40.911064 sshd[5185]: Accepted publickey for core from 10.200.16.10 port 45322 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:45:40.912957 sshd[5185]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:45:40.910000 audit[5185]: CRED_ACQ pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:40.920790 systemd[1]: Started session-11.scope. Nov 1 00:45:40.922057 systemd-logind[1417]: New session 11 of user core. Nov 1 00:45:40.937723 kernel: audit: type=1103 audit(1761957940.910:1344): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:40.960612 kernel: audit: type=1006 audit(1761957940.910:1345): pid=5185 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Nov 1 00:45:40.910000 audit[5185]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc81dba0b0 a2=3 a3=0 items=0 ppid=1 pid=5185 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:40.984785 kernel: audit: type=1300 audit(1761957940.910:1345): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc81dba0b0 a2=3 a3=0 items=0 ppid=1 pid=5185 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:40.910000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:41.001571 kernel: audit: type=1327 audit(1761957940.910:1345): proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:40.936000 audit[5185]: USER_START pid=5185 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:41.026940 kernel: audit: type=1105 audit(1761957940.936:1346): pid=5185 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:40.939000 audit[5187]: CRED_ACQ pid=5187 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:41.045589 kernel: audit: type=1103 audit(1761957940.939:1347): pid=5187 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:41.392926 sshd[5185]: pam_unix(sshd:session): session closed for user core Nov 1 00:45:41.393000 audit[5185]: USER_END pid=5185 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:41.397925 systemd[1]: sshd@8-10.200.4.5:22-10.200.16.10:45322.service: Deactivated successfully. Nov 1 00:45:41.398780 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:45:41.401279 systemd-logind[1417]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:45:41.402316 systemd-logind[1417]: Removed session 11. Nov 1 00:45:41.393000 audit[5185]: CRED_DISP pid=5185 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:41.428478 kernel: audit: type=1106 audit(1761957941.393:1348): pid=5185 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:41.428590 kernel: audit: type=1104 audit(1761957941.393:1349): pid=5185 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:41.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.4.5:22-10.200.16.10:45322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:45.237419 kubelet[2441]: E1101 00:45:45.237368 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:45:46.239157 kubelet[2441]: E1101 00:45:46.239111 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:45:46.494419 systemd[1]: Started sshd@9-10.200.4.5:22-10.200.16.10:45330.service. Nov 1 00:45:46.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.4.5:22-10.200.16.10:45330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:46.500520 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:45:46.500681 kernel: audit: type=1130 audit(1761957946.493:1351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.4.5:22-10.200.16.10:45330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:47.093000 audit[5198]: USER_ACCT pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.115769 kernel: audit: type=1101 audit(1761957947.093:1352): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.097027 sshd[5198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:45:47.116189 sshd[5198]: Accepted publickey for core from 10.200.16.10 port 45330 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:45:47.121750 systemd[1]: Started session-12.scope. Nov 1 00:45:47.123200 systemd-logind[1417]: New session 12 of user core. Nov 1 00:45:47.093000 audit[5198]: CRED_ACQ pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.144777 kernel: audit: type=1103 audit(1761957947.093:1353): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.144845 kernel: audit: type=1006 audit(1761957947.093:1354): pid=5198 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Nov 1 00:45:47.093000 audit[5198]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb99cc870 a2=3 a3=0 items=0 ppid=1 pid=5198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:47.176575 kernel: audit: type=1300 audit(1761957947.093:1354): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb99cc870 a2=3 a3=0 items=0 ppid=1 pid=5198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:47.093000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:47.143000 audit[5198]: USER_START pid=5198 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.203566 kernel: audit: type=1327 audit(1761957947.093:1354): proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:47.203674 kernel: audit: type=1105 audit(1761957947.143:1355): pid=5198 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.174000 audit[5200]: CRED_ACQ pid=5200 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.223316 kernel: audit: type=1103 audit(1761957947.174:1356): pid=5200 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.621221 sshd[5198]: pam_unix(sshd:session): session closed for user core Nov 1 00:45:47.621000 audit[5198]: USER_END pid=5198 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.624382 systemd[1]: sshd@9-10.200.4.5:22-10.200.16.10:45330.service: Deactivated successfully. Nov 1 00:45:47.625315 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:45:47.626617 systemd-logind[1417]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:45:47.627505 systemd-logind[1417]: Removed session 12. Nov 1 00:45:47.621000 audit[5198]: CRED_DISP pid=5198 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.661249 kernel: audit: type=1106 audit(1761957947.621:1357): pid=5198 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.661357 kernel: audit: type=1104 audit(1761957947.621:1358): pid=5198 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:47.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.4.5:22-10.200.16.10:45330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:47.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.4.5:22-10.200.16.10:45336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:47.718987 systemd[1]: Started sshd@10-10.200.4.5:22-10.200.16.10:45336.service. Nov 1 00:45:48.238782 kubelet[2441]: E1101 00:45:48.238738 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:45:48.320000 audit[5211]: USER_ACCT pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:48.322741 sshd[5211]: Accepted publickey for core from 10.200.16.10 port 45336 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:45:48.322000 audit[5211]: CRED_ACQ pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:48.324089 sshd[5211]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:45:48.322000 audit[5211]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffba56670 a2=3 a3=0 items=0 ppid=1 pid=5211 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:48.322000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:48.330378 systemd-logind[1417]: New session 13 of user core. Nov 1 00:45:48.331306 systemd[1]: Started session-13.scope. Nov 1 00:45:48.335000 audit[5211]: USER_START pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:48.337000 audit[5213]: CRED_ACQ pid=5213 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:48.890029 sshd[5211]: pam_unix(sshd:session): session closed for user core Nov 1 00:45:48.890000 audit[5211]: USER_END pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:48.890000 audit[5211]: CRED_DISP pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:48.893279 systemd[1]: sshd@10-10.200.4.5:22-10.200.16.10:45336.service: Deactivated successfully. Nov 1 00:45:48.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.4.5:22-10.200.16.10:45336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:48.894925 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:45:48.894954 systemd-logind[1417]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:45:48.896333 systemd-logind[1417]: Removed session 13. Nov 1 00:45:48.994679 systemd[1]: Started sshd@11-10.200.4.5:22-10.200.16.10:45340.service. Nov 1 00:45:48.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.4.5:22-10.200.16.10:45340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:49.236898 kubelet[2441]: E1101 00:45:49.236848 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:45:49.588000 audit[5221]: USER_ACCT pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:49.590691 sshd[5221]: Accepted publickey for core from 10.200.16.10 port 45340 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:45:49.590000 audit[5221]: CRED_ACQ pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:49.590000 audit[5221]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3e83c800 a2=3 a3=0 items=0 ppid=1 pid=5221 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:49.590000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:49.592219 sshd[5221]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:45:49.597283 systemd[1]: Started session-14.scope. Nov 1 00:45:49.597927 systemd-logind[1417]: New session 14 of user core. Nov 1 00:45:49.600000 audit[5221]: USER_START pid=5221 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:49.602000 audit[5223]: CRED_ACQ pid=5223 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:50.157131 sshd[5221]: pam_unix(sshd:session): session closed for user core Nov 1 00:45:50.156000 audit[5221]: USER_END pid=5221 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:50.156000 audit[5221]: CRED_DISP pid=5221 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:50.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.4.5:22-10.200.16.10:45340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:50.160181 systemd[1]: sshd@11-10.200.4.5:22-10.200.16.10:45340.service: Deactivated successfully. Nov 1 00:45:50.162599 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:45:50.164160 systemd-logind[1417]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:45:50.165319 systemd-logind[1417]: Removed session 14. Nov 1 00:45:51.238055 kubelet[2441]: E1101 00:45:51.238002 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:45:54.238810 kubelet[2441]: E1101 00:45:54.238746 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:45:55.261698 systemd[1]: Started sshd@12-10.200.4.5:22-10.200.16.10:52198.service. Nov 1 00:45:55.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.4.5:22-10.200.16.10:52198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:55.266626 kernel: kauditd_printk_skb: 23 callbacks suppressed Nov 1 00:45:55.266715 kernel: audit: type=1130 audit(1761957955.261:1378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.4.5:22-10.200.16.10:52198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:55.858000 audit[5236]: USER_ACCT pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:55.859205 sshd[5236]: Accepted publickey for core from 10.200.16.10 port 52198 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:45:55.862064 sshd[5236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:45:55.878629 kernel: audit: type=1101 audit(1761957955.858:1379): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:55.861000 audit[5236]: CRED_ACQ pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:55.884497 systemd[1]: Started session-15.scope. Nov 1 00:45:55.894052 systemd-logind[1417]: New session 15 of user core. Nov 1 00:45:55.901625 kernel: audit: type=1103 audit(1761957955.861:1380): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:55.861000 audit[5236]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd538d780 a2=3 a3=0 items=0 ppid=1 pid=5236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:55.931913 kernel: audit: type=1006 audit(1761957955.861:1381): pid=5236 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:45:55.932007 kernel: audit: type=1300 audit(1761957955.861:1381): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd538d780 a2=3 a3=0 items=0 ppid=1 pid=5236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:45:55.932042 kernel: audit: type=1327 audit(1761957955.861:1381): proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:55.861000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:45:55.899000 audit[5236]: USER_START pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:55.938568 kernel: audit: type=1105 audit(1761957955.899:1382): pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:55.901000 audit[5238]: CRED_ACQ pid=5238 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:55.972020 kernel: audit: type=1103 audit(1761957955.901:1383): pid=5238 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:56.349709 sshd[5236]: pam_unix(sshd:session): session closed for user core Nov 1 00:45:56.350000 audit[5236]: USER_END pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:56.352606 systemd[1]: sshd@12-10.200.4.5:22-10.200.16.10:52198.service: Deactivated successfully. Nov 1 00:45:56.353403 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:45:56.355062 systemd-logind[1417]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:45:56.356016 systemd-logind[1417]: Removed session 15. Nov 1 00:45:56.350000 audit[5236]: CRED_DISP pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:56.390027 kernel: audit: type=1106 audit(1761957956.350:1384): pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:56.390146 kernel: audit: type=1104 audit(1761957956.350:1385): pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:45:56.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.4.5:22-10.200.16.10:52198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:45:57.237397 kubelet[2441]: E1101 00:45:57.237345 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:45:59.237098 kubelet[2441]: E1101 00:45:59.237049 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:45:59.237670 kubelet[2441]: E1101 00:45:59.237487 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:46:00.136992 systemd[1]: run-containerd-runc-k8s.io-5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591-runc.i9kgul.mount: Deactivated successfully. Nov 1 00:46:01.451333 systemd[1]: Started sshd@13-10.200.4.5:22-10.200.16.10:50794.service. Nov 1 00:46:01.482792 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:46:01.482907 kernel: audit: type=1130 audit(1761957961.451:1387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.4.5:22-10.200.16.10:50794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:01.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.4.5:22-10.200.16.10:50794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:02.049598 sshd[5271]: Accepted publickey for core from 10.200.16.10 port 50794 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:02.048000 audit[5271]: USER_ACCT pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.051167 sshd[5271]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:02.069772 kernel: audit: type=1101 audit(1761957962.048:1388): pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.050000 audit[5271]: CRED_ACQ pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.089485 kernel: audit: type=1103 audit(1761957962.050:1389): pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.092807 systemd[1]: Started session-16.scope. Nov 1 00:46:02.094620 systemd-logind[1417]: New session 16 of user core. Nov 1 00:46:02.102626 kernel: audit: type=1006 audit(1761957962.050:1390): pid=5271 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:46:02.050000 audit[5271]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde8b21420 a2=3 a3=0 items=0 ppid=1 pid=5271 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:02.120597 kernel: audit: type=1300 audit(1761957962.050:1390): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde8b21420 a2=3 a3=0 items=0 ppid=1 pid=5271 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:02.050000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:02.126606 kernel: audit: type=1327 audit(1761957962.050:1390): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:02.126676 kernel: audit: type=1105 audit(1761957962.099:1391): pid=5271 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.099000 audit[5271]: USER_START pid=5271 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.162038 kernel: audit: type=1103 audit(1761957962.107:1392): pid=5273 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.107000 audit[5273]: CRED_ACQ pid=5273 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.239877 kubelet[2441]: E1101 00:46:02.239832 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:46:02.560501 sshd[5271]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:02.561000 audit[5271]: USER_END pid=5271 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.589215 kernel: audit: type=1106 audit(1761957962.561:1393): pid=5271 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.587531 systemd-logind[1417]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:46:02.587800 systemd[1]: sshd@13-10.200.4.5:22-10.200.16.10:50794.service: Deactivated successfully. Nov 1 00:46:02.588882 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:46:02.591852 systemd-logind[1417]: Removed session 16. Nov 1 00:46:02.561000 audit[5271]: CRED_DISP pid=5271 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:02.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.4.5:22-10.200.16.10:50794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:02.613592 kernel: audit: type=1104 audit(1761957962.561:1394): pid=5271 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:04.238194 kubelet[2441]: E1101 00:46:04.237899 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:46:05.239705 kubelet[2441]: E1101 00:46:05.238982 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:46:07.663685 systemd[1]: Started sshd@14-10.200.4.5:22-10.200.16.10:50800.service. Nov 1 00:46:07.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.4.5:22-10.200.16.10:50800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:07.669768 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:46:07.669886 kernel: audit: type=1130 audit(1761957967.663:1396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.4.5:22-10.200.16.10:50800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:08.283000 audit[5283]: USER_ACCT pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.304844 sshd[5283]: Accepted publickey for core from 10.200.16.10 port 50800 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:08.305577 kernel: audit: type=1101 audit(1761957968.283:1397): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.306868 sshd[5283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:08.305000 audit[5283]: CRED_ACQ pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.326571 kernel: audit: type=1103 audit(1761957968.305:1398): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.338785 kernel: audit: type=1006 audit(1761957968.305:1399): pid=5283 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Nov 1 00:46:08.305000 audit[5283]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcb8b7380 a2=3 a3=0 items=0 ppid=1 pid=5283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.342649 systemd-logind[1417]: New session 17 of user core. Nov 1 00:46:08.365997 kernel: audit: type=1300 audit(1761957968.305:1399): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcb8b7380 a2=3 a3=0 items=0 ppid=1 pid=5283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:08.366047 kernel: audit: type=1327 audit(1761957968.305:1399): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:08.305000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:08.366617 systemd[1]: Started session-17.scope. Nov 1 00:46:08.373000 audit[5283]: USER_START pid=5283 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.395425 kernel: audit: type=1105 audit(1761957968.373:1400): pid=5283 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.395000 audit[5285]: CRED_ACQ pid=5285 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.413574 kernel: audit: type=1103 audit(1761957968.395:1401): pid=5285 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.864298 sshd[5283]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:08.864000 audit[5283]: USER_END pid=5283 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.879931 systemd[1]: sshd@14-10.200.4.5:22-10.200.16.10:50800.service: Deactivated successfully. Nov 1 00:46:08.880788 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:46:08.882131 systemd-logind[1417]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:46:08.883161 systemd-logind[1417]: Removed session 17. Nov 1 00:46:08.891572 kernel: audit: type=1106 audit(1761957968.864:1402): pid=5283 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.891650 kernel: audit: type=1104 audit(1761957968.870:1403): pid=5283 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.870000 audit[5283]: CRED_DISP pid=5283 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:08.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.4.5:22-10.200.16.10:50800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:10.238534 kubelet[2441]: E1101 00:46:10.238481 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:46:11.237386 kubelet[2441]: E1101 00:46:11.237338 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:46:11.382000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=525666 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:11.382000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c0113f4000 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:46:11.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:46:11.537000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:11.537000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c012064e10 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:46:11.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:46:11.537000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:11.537000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c012064ed0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:46:11.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:46:11.537000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=525660 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:11.537000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c012064f30 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:46:11.537000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:46:11.538000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:11.538000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c01085fee0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:46:11.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:46:11.538000 audit[2262]: AVC avc: denied { watch } for pid=2262 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:11.538000 audit[2262]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c011c6a3a0 a2=fc6 a3=0 items=0 ppid=2120 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c652,c998 key=(null) Nov 1 00:46:11.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 00:46:12.084000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=525664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:12.084000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00239d470 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:46:12.084000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:12.087000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:12.087000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003412d20 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:46:12.087000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:12.237100 kubelet[2441]: E1101 00:46:12.237060 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:46:13.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.4.5:22-10.200.16.10:60346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:13.963686 systemd[1]: Started sshd@15-10.200.4.5:22-10.200.16.10:60346.service. Nov 1 00:46:13.987264 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 00:46:13.987378 kernel: audit: type=1130 audit(1761957973.962:1413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.4.5:22-10.200.16.10:60346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:14.563511 sshd[5294]: Accepted publickey for core from 10.200.16.10 port 60346 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:14.565307 sshd[5294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:14.561000 audit[5294]: USER_ACCT pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:14.584592 kernel: audit: type=1101 audit(1761957974.561:1414): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:14.590466 systemd-logind[1417]: New session 18 of user core. Nov 1 00:46:14.591884 systemd[1]: Started session-18.scope. Nov 1 00:46:14.563000 audit[5294]: CRED_ACQ pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:14.613829 kernel: audit: type=1103 audit(1761957974.563:1415): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:14.563000 audit[5294]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeecf723e0 a2=3 a3=0 items=0 ppid=1 pid=5294 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:14.642854 kernel: audit: type=1006 audit(1761957974.563:1416): pid=5294 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Nov 1 00:46:14.642940 kernel: audit: type=1300 audit(1761957974.563:1416): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeecf723e0 a2=3 a3=0 items=0 ppid=1 pid=5294 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:14.647586 kernel: audit: type=1327 audit(1761957974.563:1416): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:14.563000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:14.612000 audit[5294]: USER_START pid=5294 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:14.670097 kernel: audit: type=1105 audit(1761957974.612:1417): pid=5294 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:14.614000 audit[5296]: CRED_ACQ pid=5296 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:14.670674 kernel: audit: type=1103 audit(1761957974.614:1418): pid=5296 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:15.084270 sshd[5294]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:15.084000 audit[5294]: USER_END pid=5294 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:15.087424 systemd[1]: sshd@15-10.200.4.5:22-10.200.16.10:60346.service: Deactivated successfully. Nov 1 00:46:15.088239 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:46:15.090690 systemd-logind[1417]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:46:15.091627 systemd-logind[1417]: Removed session 18. Nov 1 00:46:15.084000 audit[5294]: CRED_DISP pid=5294 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:15.119291 kernel: audit: type=1106 audit(1761957975.084:1419): pid=5294 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:15.119379 kernel: audit: type=1104 audit(1761957975.084:1420): pid=5294 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:15.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.4.5:22-10.200.16.10:60346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:15.184098 systemd[1]: Started sshd@16-10.200.4.5:22-10.200.16.10:60362.service. Nov 1 00:46:15.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.4.5:22-10.200.16.10:60362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:15.792772 sshd[5305]: Accepted publickey for core from 10.200.16.10 port 60362 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:15.794636 sshd[5305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:15.791000 audit[5305]: USER_ACCT pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:15.792000 audit[5305]: CRED_ACQ pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:15.792000 audit[5305]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff49a6d410 a2=3 a3=0 items=0 ppid=1 pid=5305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:15.792000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:15.800834 systemd[1]: Started session-19.scope. Nov 1 00:46:15.801653 systemd-logind[1417]: New session 19 of user core. Nov 1 00:46:15.806000 audit[5305]: USER_START pid=5305 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:15.809000 audit[5307]: CRED_ACQ pid=5307 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:16.246503 kubelet[2441]: E1101 00:46:16.246448 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:46:16.394360 sshd[5305]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:16.393000 audit[5305]: USER_END pid=5305 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:16.394000 audit[5305]: CRED_DISP pid=5305 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:16.397701 systemd-logind[1417]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:46:16.397947 systemd[1]: sshd@16-10.200.4.5:22-10.200.16.10:60362.service: Deactivated successfully. Nov 1 00:46:16.398984 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:46:16.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.4.5:22-10.200.16.10:60362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:16.400630 systemd-logind[1417]: Removed session 19. Nov 1 00:46:16.495274 systemd[1]: Started sshd@17-10.200.4.5:22-10.200.16.10:60368.service. Nov 1 00:46:16.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.4.5:22-10.200.16.10:60368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:17.091439 sshd[5317]: Accepted publickey for core from 10.200.16.10 port 60368 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:17.088000 audit[5317]: USER_ACCT pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:17.090000 audit[5317]: CRED_ACQ pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:17.090000 audit[5317]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc336b4280 a2=3 a3=0 items=0 ppid=1 pid=5317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:17.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:17.093126 sshd[5317]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:17.098547 systemd-logind[1417]: New session 20 of user core. Nov 1 00:46:17.099182 systemd[1]: Started session-20.scope. Nov 1 00:46:17.102000 audit[5317]: USER_START pid=5317 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:17.103000 audit[5319]: CRED_ACQ pid=5319 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:18.080000 audit[5330]: NETFILTER_CFG table=filter:133 family=2 entries=26 op=nft_register_rule pid=5330 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:18.080000 audit[5330]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffc07fe7fa0 a2=0 a3=7ffc07fe7f8c items=0 ppid=2550 pid=5330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:18.080000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:18.086000 audit[5330]: NETFILTER_CFG table=nat:134 family=2 entries=20 op=nft_register_rule pid=5330 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:18.086000 audit[5330]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc07fe7fa0 a2=0 a3=0 items=0 ppid=2550 pid=5330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:18.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:18.104000 audit[5332]: NETFILTER_CFG table=filter:135 family=2 entries=38 op=nft_register_rule pid=5332 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:18.104000 audit[5332]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffdc9379050 a2=0 a3=7ffdc937903c items=0 ppid=2550 pid=5332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:18.104000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:18.109000 audit[5332]: NETFILTER_CFG table=nat:136 family=2 entries=20 op=nft_register_rule pid=5332 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:18.109000 audit[5332]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffdc9379050 a2=0 a3=0 items=0 ppid=2550 pid=5332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:18.109000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:18.181800 sshd[5317]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:18.181000 audit[5317]: USER_END pid=5317 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:18.181000 audit[5317]: CRED_DISP pid=5317 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:18.185319 systemd-logind[1417]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:46:18.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.4.5:22-10.200.16.10:60368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:18.187255 systemd[1]: sshd@17-10.200.4.5:22-10.200.16.10:60368.service: Deactivated successfully. Nov 1 00:46:18.188304 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:46:18.191321 systemd-logind[1417]: Removed session 20. Nov 1 00:46:18.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.4.5:22-10.200.16.10:60370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:18.280764 systemd[1]: Started sshd@18-10.200.4.5:22-10.200.16.10:60370.service. Nov 1 00:46:18.876764 sshd[5335]: Accepted publickey for core from 10.200.16.10 port 60370 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:18.878629 sshd[5335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:18.875000 audit[5335]: USER_ACCT pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:18.876000 audit[5335]: CRED_ACQ pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:18.876000 audit[5335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2da93d90 a2=3 a3=0 items=0 ppid=1 pid=5335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:18.876000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:18.885036 systemd-logind[1417]: New session 21 of user core. Nov 1 00:46:18.885751 systemd[1]: Started session-21.scope. Nov 1 00:46:18.889000 audit[5335]: USER_START pid=5335 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:18.891000 audit[5337]: CRED_ACQ pid=5337 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:19.237772 kubelet[2441]: E1101 00:46:19.237596 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:46:19.239497 kubelet[2441]: E1101 00:46:19.239427 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:46:19.623161 sshd[5335]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:19.635620 kernel: kauditd_printk_skb: 43 callbacks suppressed Nov 1 00:46:19.635746 kernel: audit: type=1106 audit(1761957979.623:1450): pid=5335 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:19.623000 audit[5335]: USER_END pid=5335 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:19.630963 systemd[1]: sshd@18-10.200.4.5:22-10.200.16.10:60370.service: Deactivated successfully. Nov 1 00:46:19.632513 systemd-logind[1417]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:46:19.650243 kernel: audit: type=1104 audit(1761957979.623:1451): pid=5335 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:19.623000 audit[5335]: CRED_DISP pid=5335 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:19.649694 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:46:19.651142 systemd-logind[1417]: Removed session 21. Nov 1 00:46:19.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.4.5:22-10.200.16.10:60370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:19.684517 kernel: audit: type=1131 audit(1761957979.629:1452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.4.5:22-10.200.16.10:60370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:19.723386 systemd[1]: Started sshd@19-10.200.4.5:22-10.200.16.10:60384.service. Nov 1 00:46:19.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.4.5:22-10.200.16.10:60384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:19.743596 kernel: audit: type=1130 audit(1761957979.722:1453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.4.5:22-10.200.16.10:60384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:20.312000 audit[5346]: USER_ACCT pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.333614 kernel: audit: type=1101 audit(1761957980.312:1454): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.315446 sshd[5346]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:20.334018 sshd[5346]: Accepted publickey for core from 10.200.16.10 port 60384 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:20.312000 audit[5346]: CRED_ACQ pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.344587 systemd-logind[1417]: New session 22 of user core. Nov 1 00:46:20.354571 kernel: audit: type=1103 audit(1761957980.312:1455): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.355120 systemd[1]: Started session-22.scope. Nov 1 00:46:20.370576 kernel: audit: type=1006 audit(1761957980.312:1456): pid=5346 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Nov 1 00:46:20.312000 audit[5346]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebc4bca90 a2=3 a3=0 items=0 ppid=1 pid=5346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:20.389577 kernel: audit: type=1300 audit(1761957980.312:1456): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebc4bca90 a2=3 a3=0 items=0 ppid=1 pid=5346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:20.312000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:20.399578 kernel: audit: type=1327 audit(1761957980.312:1456): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:20.371000 audit[5346]: USER_START pid=5346 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.420576 kernel: audit: type=1105 audit(1761957980.371:1457): pid=5346 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.388000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:20.388000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0035da6a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:46:20.388000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:20.389000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:20.389000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0035da6c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:46:20.389000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:20.389000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:20.389000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0035da700 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:46:20.389000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:20.390000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:46:20.390000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00361b940 a2=fc6 a3=0 items=0 ppid=2140 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c374 key=(null) Nov 1 00:46:20.390000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:46:20.390000 audit[5348]: CRED_ACQ pid=5348 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.854797 sshd[5346]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:20.854000 audit[5346]: USER_END pid=5346 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.855000 audit[5346]: CRED_DISP pid=5346 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:20.859167 systemd-logind[1417]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:46:20.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.4.5:22-10.200.16.10:60384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:20.861093 systemd[1]: sshd@19-10.200.4.5:22-10.200.16.10:60384.service: Deactivated successfully. Nov 1 00:46:20.862144 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:46:20.864155 systemd-logind[1417]: Removed session 22. Nov 1 00:46:24.239193 kubelet[2441]: E1101 00:46:24.239147 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:46:25.237077 kubelet[2441]: E1101 00:46:25.237014 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:46:25.237674 kubelet[2441]: E1101 00:46:25.237608 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:46:25.992210 kernel: kauditd_printk_skb: 16 callbacks suppressed Nov 1 00:46:25.992374 kernel: audit: type=1130 audit(1761957985.961:1466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.4.5:22-10.200.16.10:57282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:25.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.4.5:22-10.200.16.10:57282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:25.962702 systemd[1]: Started sshd@20-10.200.4.5:22-10.200.16.10:57282.service. Nov 1 00:46:26.563000 audit[5360]: USER_ACCT pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:26.567077 sshd[5360]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:26.584033 sshd[5360]: Accepted publickey for core from 10.200.16.10 port 57282 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:26.584893 kernel: audit: type=1101 audit(1761957986.563:1467): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:26.590382 systemd[1]: Started session-23.scope. Nov 1 00:46:26.591797 systemd-logind[1417]: New session 23 of user core. Nov 1 00:46:26.565000 audit[5360]: CRED_ACQ pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:26.626803 kernel: audit: type=1103 audit(1761957986.565:1468): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:26.626912 kernel: audit: type=1006 audit(1761957986.565:1469): pid=5360 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:46:26.565000 audit[5360]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd778f9ec0 a2=3 a3=0 items=0 ppid=1 pid=5360 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:26.644028 kernel: audit: type=1300 audit(1761957986.565:1469): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd778f9ec0 a2=3 a3=0 items=0 ppid=1 pid=5360 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:26.565000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:26.596000 audit[5360]: USER_START pid=5360 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:26.673147 kernel: audit: type=1327 audit(1761957986.565:1469): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:26.673294 kernel: audit: type=1105 audit(1761957986.596:1470): pid=5360 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:26.597000 audit[5362]: CRED_ACQ pid=5362 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:26.690464 kernel: audit: type=1103 audit(1761957986.597:1471): pid=5362 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:27.118450 sshd[5360]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:27.118000 audit[5360]: USER_END pid=5360 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:27.144578 kernel: audit: type=1106 audit(1761957987.118:1472): pid=5360 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:27.145854 systemd[1]: sshd@20-10.200.4.5:22-10.200.16.10:57282.service: Deactivated successfully. Nov 1 00:46:27.146911 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:46:27.147727 systemd-logind[1417]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:46:27.148702 systemd-logind[1417]: Removed session 23. Nov 1 00:46:27.118000 audit[5360]: CRED_DISP pid=5360 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:27.171572 kernel: audit: type=1104 audit(1761957987.118:1473): pid=5360 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:27.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.4.5:22-10.200.16.10:57282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:27.527000 audit[5372]: NETFILTER_CFG table=filter:137 family=2 entries=26 op=nft_register_rule pid=5372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:27.527000 audit[5372]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff5042ddb0 a2=0 a3=7fff5042dd9c items=0 ppid=2550 pid=5372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:27.527000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:27.532000 audit[5372]: NETFILTER_CFG table=nat:138 family=2 entries=104 op=nft_register_chain pid=5372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:46:27.532000 audit[5372]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7fff5042ddb0 a2=0 a3=7fff5042dd9c items=0 ppid=2550 pid=5372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:27.532000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:46:30.129820 systemd[1]: run-containerd-runc-k8s.io-5c95ef5ac626ade8ef53f21ad3eaa786dc1ad319bd0a9c6ab9c036d255392591-runc.KktfDo.mount: Deactivated successfully. Nov 1 00:46:31.237051 kubelet[2441]: E1101 00:46:31.237003 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:46:32.221883 systemd[1]: Started sshd@21-10.200.4.5:22-10.200.16.10:53084.service. Nov 1 00:46:32.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.4.5:22-10.200.16.10:53084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:32.227359 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:46:32.227451 kernel: audit: type=1130 audit(1761957992.220:1477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.4.5:22-10.200.16.10:53084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:32.237337 kubelet[2441]: E1101 00:46:32.237301 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:46:32.816861 sshd[5394]: Accepted publickey for core from 10.200.16.10 port 53084 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:32.815000 audit[5394]: USER_ACCT pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:32.818409 sshd[5394]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:32.836750 kernel: audit: type=1101 audit(1761957992.815:1478): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:32.815000 audit[5394]: CRED_ACQ pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:32.864188 kernel: audit: type=1103 audit(1761957992.815:1479): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:32.864265 kernel: audit: type=1006 audit(1761957992.815:1480): pid=5394 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Nov 1 00:46:32.864291 kernel: audit: type=1300 audit(1761957992.815:1480): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6e80f680 a2=3 a3=0 items=0 ppid=1 pid=5394 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:32.815000 audit[5394]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6e80f680 a2=3 a3=0 items=0 ppid=1 pid=5394 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:32.865673 systemd[1]: Started session-24.scope. Nov 1 00:46:32.866905 systemd-logind[1417]: New session 24 of user core. Nov 1 00:46:32.815000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:32.873000 audit[5394]: USER_START pid=5394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:32.911993 kernel: audit: type=1327 audit(1761957992.815:1480): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:32.912117 kernel: audit: type=1105 audit(1761957992.873:1481): pid=5394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:32.912154 kernel: audit: type=1103 audit(1761957992.884:1482): pid=5396 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:32.884000 audit[5396]: CRED_ACQ pid=5396 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:33.237646 kubelet[2441]: E1101 00:46:33.237591 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:46:33.371055 sshd[5394]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:33.371000 audit[5394]: USER_END pid=5394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:33.394485 systemd[1]: sshd@21-10.200.4.5:22-10.200.16.10:53084.service: Deactivated successfully. Nov 1 00:46:33.394856 kernel: audit: type=1106 audit(1761957993.371:1483): pid=5394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:33.395585 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:46:33.397419 systemd-logind[1417]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:46:33.398490 systemd-logind[1417]: Removed session 24. Nov 1 00:46:33.372000 audit[5394]: CRED_DISP pid=5394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:33.417575 kernel: audit: type=1104 audit(1761957993.372:1484): pid=5394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:33.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.4.5:22-10.200.16.10:53084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:36.238967 kubelet[2441]: E1101 00:46:36.238898 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:46:38.473635 systemd[1]: Started sshd@22-10.200.4.5:22-10.200.16.10:53100.service. Nov 1 00:46:38.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.4.5:22-10.200.16.10:53100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:38.478878 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:46:38.478965 kernel: audit: type=1130 audit(1761957998.473:1486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.4.5:22-10.200.16.10:53100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:39.103152 sshd[5406]: Accepted publickey for core from 10.200.16.10 port 53100 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:39.105190 sshd[5406]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:39.102000 audit[5406]: USER_ACCT pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.122576 kernel: audit: type=1101 audit(1761957999.102:1487): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.104000 audit[5406]: CRED_ACQ pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.138619 systemd-logind[1417]: New session 25 of user core. Nov 1 00:46:39.140882 systemd[1]: Started session-25.scope. Nov 1 00:46:39.152718 kernel: audit: type=1103 audit(1761957999.104:1488): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.152818 kernel: audit: type=1006 audit(1761957999.104:1489): pid=5406 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:46:39.152846 kernel: audit: type=1300 audit(1761957999.104:1489): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8d8c7f70 a2=3 a3=0 items=0 ppid=1 pid=5406 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:39.104000 audit[5406]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8d8c7f70 a2=3 a3=0 items=0 ppid=1 pid=5406 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:39.104000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:39.146000 audit[5406]: USER_START pid=5406 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.196325 kernel: audit: type=1327 audit(1761957999.104:1489): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:39.196401 kernel: audit: type=1105 audit(1761957999.146:1490): pid=5406 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.196427 kernel: audit: type=1103 audit(1761957999.151:1491): pid=5408 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.151000 audit[5408]: CRED_ACQ pid=5408 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.635757 sshd[5406]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:39.636000 audit[5406]: USER_END pid=5406 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.638609 systemd[1]: sshd@22-10.200.4.5:22-10.200.16.10:53100.service: Deactivated successfully. Nov 1 00:46:39.650933 systemd-logind[1417]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:46:39.658786 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:46:39.659617 kernel: audit: type=1106 audit(1761957999.636:1492): pid=5406 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.660381 systemd-logind[1417]: Removed session 25. Nov 1 00:46:39.636000 audit[5406]: CRED_DISP pid=5406 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:39.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.4.5:22-10.200.16.10:53100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:39.683597 kernel: audit: type=1104 audit(1761957999.636:1493): pid=5406 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:40.240168 kubelet[2441]: E1101 00:46:40.240112 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:46:40.240757 kubelet[2441]: E1101 00:46:40.240627 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a" Nov 1 00:46:44.752613 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:46:44.752731 kernel: audit: type=1130 audit(1761958004.735:1495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.4.5:22-10.200.16.10:39402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:44.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.4.5:22-10.200.16.10:39402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:44.735648 systemd[1]: Started sshd@23-10.200.4.5:22-10.200.16.10:39402.service. Nov 1 00:46:45.238085 kubelet[2441]: E1101 00:46:45.238034 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-cpllc" podUID="31c65c5c-1a06-4110-b81b-98d3530e65c1" Nov 1 00:46:45.239202 kubelet[2441]: E1101 00:46:45.239157 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5b6fd5995d-bq9rw" podUID="114fdca3-3bbe-4894-af68-80fba407dd24" Nov 1 00:46:45.365328 sshd[5424]: Accepted publickey for core from 10.200.16.10 port 39402 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:45.364000 audit[5424]: USER_ACCT pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.372738 sshd[5424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:45.378439 systemd[1]: Started session-26.scope. Nov 1 00:46:45.379835 systemd-logind[1417]: New session 26 of user core. Nov 1 00:46:45.386584 kernel: audit: type=1101 audit(1761958005.364:1496): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.366000 audit[5424]: CRED_ACQ pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.428251 kernel: audit: type=1103 audit(1761958005.366:1497): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.428364 kernel: audit: type=1006 audit(1761958005.366:1498): pid=5424 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 00:46:45.428394 kernel: audit: type=1300 audit(1761958005.366:1498): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2cd7ee40 a2=3 a3=0 items=0 ppid=1 pid=5424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:45.366000 audit[5424]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2cd7ee40 a2=3 a3=0 items=0 ppid=1 pid=5424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:45.366000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:45.447237 kernel: audit: type=1327 audit(1761958005.366:1498): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:45.447327 kernel: audit: type=1105 audit(1761958005.387:1499): pid=5424 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.387000 audit[5424]: USER_START pid=5424 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.389000 audit[5429]: CRED_ACQ pid=5429 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.481746 kernel: audit: type=1103 audit(1761958005.389:1500): pid=5429 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.856000 audit[5424]: USER_END pid=5424 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.859156 systemd-logind[1417]: Session 26 logged out. Waiting for processes to exit. Nov 1 00:46:45.855473 sshd[5424]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:45.860436 systemd[1]: sshd@23-10.200.4.5:22-10.200.16.10:39402.service: Deactivated successfully. Nov 1 00:46:45.861356 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 00:46:45.862483 systemd-logind[1417]: Removed session 26. Nov 1 00:46:45.875590 kernel: audit: type=1106 audit(1761958005.856:1501): pid=5424 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.856000 audit[5424]: CRED_DISP pid=5424 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:45.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.4.5:22-10.200.16.10:39402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:45.895678 kernel: audit: type=1104 audit(1761958005.856:1502): pid=5424 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:47.237102 kubelet[2441]: E1101 00:46:47.237052 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-65nv4" podUID="c4fa1769-b5ef-44fb-bb2e-c91531ca49da" Nov 1 00:46:47.238275 kubelet[2441]: E1101 00:46:47.237649 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9ksnm" podUID="ce526820-d1dc-4357-9fb7-1cb0ce632942" Nov 1 00:46:50.955959 systemd[1]: Started sshd@24-10.200.4.5:22-10.200.16.10:40636.service. Nov 1 00:46:50.983014 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:46:50.983175 kernel: audit: type=1130 audit(1761958010.961:1504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.4.5:22-10.200.16.10:40636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:50.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.4.5:22-10.200.16.10:40636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:51.553000 audit[5441]: USER_ACCT pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:51.555925 sshd[5441]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:46:51.574233 sshd[5441]: Accepted publickey for core from 10.200.16.10 port 40636 ssh2: RSA SHA256:0Lz+e65NmjcLEWSU8nZWVjcdNmuD7VGwfZr523Bu77Q Nov 1 00:46:51.574576 kernel: audit: type=1101 audit(1761958011.553:1505): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:51.581542 systemd[1]: Started session-27.scope. Nov 1 00:46:51.582997 systemd-logind[1417]: New session 27 of user core. Nov 1 00:46:51.553000 audit[5441]: CRED_ACQ pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:51.605575 kernel: audit: type=1103 audit(1761958011.553:1506): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:51.620133 kernel: audit: type=1006 audit(1761958011.553:1507): pid=5441 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Nov 1 00:46:51.620223 kernel: audit: type=1300 audit(1761958011.553:1507): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9fe8e0c0 a2=3 a3=0 items=0 ppid=1 pid=5441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:51.553000 audit[5441]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9fe8e0c0 a2=3 a3=0 items=0 ppid=1 pid=5441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:46:51.553000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:51.642756 kernel: audit: type=1327 audit(1761958011.553:1507): proctitle=737368643A20636F7265205B707269765D Nov 1 00:46:51.586000 audit[5441]: USER_START pid=5441 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:51.663375 kernel: audit: type=1105 audit(1761958011.586:1508): pid=5441 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:51.586000 audit[5443]: CRED_ACQ pid=5443 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:51.681575 kernel: audit: type=1103 audit(1761958011.586:1509): pid=5443 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:52.074101 sshd[5441]: pam_unix(sshd:session): session closed for user core Nov 1 00:46:52.074000 audit[5441]: USER_END pid=5441 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:52.096583 kernel: audit: type=1106 audit(1761958012.074:1510): pid=5441 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:52.096145 systemd[1]: sshd@24-10.200.4.5:22-10.200.16.10:40636.service: Deactivated successfully. Nov 1 00:46:52.080000 audit[5441]: CRED_DISP pid=5441 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:52.097227 systemd[1]: session-27.scope: Deactivated successfully. Nov 1 00:46:52.098281 systemd-logind[1417]: Session 27 logged out. Waiting for processes to exit. Nov 1 00:46:52.099214 systemd-logind[1417]: Removed session 27. Nov 1 00:46:52.112570 kernel: audit: type=1104 audit(1761958012.080:1511): pid=5441 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:46:52.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.4.5:22-10.200.16.10:40636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:46:52.238169 kubelet[2441]: E1101 00:46:52.238122 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-578795468d-6l946" podUID="c8835bb5-2375-444c-85bc-4149b7d50cd0" Nov 1 00:46:52.239391 kubelet[2441]: E1101 00:46:52.239337 2441 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-56df8c5d4b-rfbnt" podUID="4c3c0e0e-07f0-4e99-8395-721e399f588a"