Nov 1 00:58:18.041083 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Oct 31 23:02:53 -00 2025 Nov 1 00:58:18.041104 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:58:18.041115 kernel: BIOS-provided physical RAM map: Nov 1 00:58:18.041121 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Nov 1 00:58:18.041129 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Nov 1 00:58:18.041135 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Nov 1 00:58:18.041144 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Nov 1 00:58:18.041153 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Nov 1 00:58:18.041159 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Nov 1 00:58:18.041167 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Nov 1 00:58:18.041174 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Nov 1 00:58:18.041180 kernel: printk: bootconsole [earlyser0] enabled Nov 1 00:58:18.041185 kernel: NX (Execute Disable) protection: active Nov 1 00:58:18.041193 kernel: efi: EFI v2.70 by Microsoft Nov 1 00:58:18.041203 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5c7a98 RNG=0x3ffd1018 Nov 1 00:58:18.041213 kernel: random: crng init done Nov 1 00:58:18.041219 kernel: SMBIOS 3.1.0 present. Nov 1 00:58:18.041225 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 03/08/2024 Nov 1 00:58:18.041233 kernel: Hypervisor detected: Microsoft Hyper-V Nov 1 00:58:18.041241 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Nov 1 00:58:18.041249 kernel: Hyper-V Host Build:20348-10.0-1-0.1827 Nov 1 00:58:18.041256 kernel: Hyper-V: Nested features: 0x1e0101 Nov 1 00:58:18.041265 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Nov 1 00:58:18.041272 kernel: Hyper-V: Using hypercall for remote TLB flush Nov 1 00:58:18.041280 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Nov 1 00:58:18.041287 kernel: tsc: Marking TSC unstable due to running on Hyper-V Nov 1 00:58:18.041296 kernel: tsc: Detected 2593.905 MHz processor Nov 1 00:58:18.041303 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Nov 1 00:58:18.041310 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Nov 1 00:58:18.041319 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Nov 1 00:58:18.041325 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Nov 1 00:58:18.041335 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Nov 1 00:58:18.041343 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Nov 1 00:58:18.041350 kernel: Using GB pages for direct mapping Nov 1 00:58:18.041359 kernel: Secure boot disabled Nov 1 00:58:18.041366 kernel: ACPI: Early table checksum verification disabled Nov 1 00:58:18.041375 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Nov 1 00:58:18.041381 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041388 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041399 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Nov 1 00:58:18.041413 kernel: ACPI: FACS 0x000000003FFFE000 000040 Nov 1 00:58:18.041420 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041427 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041437 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041444 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041452 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041463 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041469 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:58:18.041476 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Nov 1 00:58:18.041484 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Nov 1 00:58:18.041493 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Nov 1 00:58:18.041500 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Nov 1 00:58:18.041510 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Nov 1 00:58:18.041517 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Nov 1 00:58:18.041526 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Nov 1 00:58:18.041535 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Nov 1 00:58:18.041543 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Nov 1 00:58:18.041552 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Nov 1 00:58:18.041559 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Nov 1 00:58:18.041566 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Nov 1 00:58:18.041575 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Nov 1 00:58:18.041582 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Nov 1 00:58:18.041592 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Nov 1 00:58:18.041601 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Nov 1 00:58:18.041608 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Nov 1 00:58:18.041616 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Nov 1 00:58:18.041625 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Nov 1 00:58:18.041632 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Nov 1 00:58:18.041642 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Nov 1 00:58:18.041648 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Nov 1 00:58:18.041655 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Nov 1 00:58:18.041663 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Nov 1 00:58:18.041674 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Nov 1 00:58:18.041684 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Nov 1 00:58:18.041691 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Nov 1 00:58:18.041698 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Nov 1 00:58:18.041708 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Nov 1 00:58:18.041716 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Nov 1 00:58:18.041725 kernel: Zone ranges: Nov 1 00:58:18.041732 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Nov 1 00:58:18.041739 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Nov 1 00:58:18.041751 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Nov 1 00:58:18.041758 kernel: Movable zone start for each node Nov 1 00:58:18.041767 kernel: Early memory node ranges Nov 1 00:58:18.041774 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Nov 1 00:58:18.041781 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Nov 1 00:58:18.041798 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Nov 1 00:58:18.041808 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Nov 1 00:58:18.041815 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Nov 1 00:58:18.041822 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Nov 1 00:58:18.041833 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Nov 1 00:58:18.041842 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Nov 1 00:58:18.041850 kernel: ACPI: PM-Timer IO Port: 0x408 Nov 1 00:58:18.041857 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Nov 1 00:58:18.041866 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Nov 1 00:58:18.041874 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Nov 1 00:58:18.041883 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Nov 1 00:58:18.041891 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Nov 1 00:58:18.041897 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Nov 1 00:58:18.041910 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Nov 1 00:58:18.041917 kernel: Booting paravirtualized kernel on Hyper-V Nov 1 00:58:18.041927 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Nov 1 00:58:18.041934 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Nov 1 00:58:18.041942 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Nov 1 00:58:18.041951 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Nov 1 00:58:18.041959 kernel: pcpu-alloc: [0] 0 1 Nov 1 00:58:18.041968 kernel: Hyper-V: PV spinlocks enabled Nov 1 00:58:18.041975 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Nov 1 00:58:18.041985 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Nov 1 00:58:18.041993 kernel: Policy zone: Normal Nov 1 00:58:18.042004 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:58:18.042011 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:58:18.042018 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Nov 1 00:58:18.042029 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:58:18.042036 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:58:18.042043 kernel: Memory: 8079144K/8387460K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47496K init, 4084K bss, 308056K reserved, 0K cma-reserved) Nov 1 00:58:18.042054 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Nov 1 00:58:18.042061 kernel: ftrace: allocating 34614 entries in 136 pages Nov 1 00:58:18.042079 kernel: ftrace: allocated 136 pages with 2 groups Nov 1 00:58:18.042088 kernel: rcu: Hierarchical RCU implementation. Nov 1 00:58:18.042095 kernel: rcu: RCU event tracing is enabled. Nov 1 00:58:18.042103 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Nov 1 00:58:18.042110 kernel: Rude variant of Tasks RCU enabled. Nov 1 00:58:18.042117 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:58:18.042125 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:58:18.042132 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Nov 1 00:58:18.042139 kernel: Using NULL legacy PIC Nov 1 00:58:18.042148 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Nov 1 00:58:18.042155 kernel: Console: colour dummy device 80x25 Nov 1 00:58:18.042162 kernel: printk: console [tty1] enabled Nov 1 00:58:18.042170 kernel: printk: console [ttyS0] enabled Nov 1 00:58:18.042177 kernel: printk: bootconsole [earlyser0] disabled Nov 1 00:58:18.042186 kernel: ACPI: Core revision 20210730 Nov 1 00:58:18.042193 kernel: Failed to register legacy timer interrupt Nov 1 00:58:18.042200 kernel: APIC: Switch to symmetric I/O mode setup Nov 1 00:58:18.042210 kernel: Hyper-V: Using IPI hypercalls Nov 1 00:58:18.042218 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Nov 1 00:58:18.042225 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Nov 1 00:58:18.042232 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Nov 1 00:58:18.042240 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Nov 1 00:58:18.042248 kernel: Spectre V2 : Mitigation: Retpolines Nov 1 00:58:18.042257 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Nov 1 00:58:18.042266 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Nov 1 00:58:18.042273 kernel: RETBleed: Vulnerable Nov 1 00:58:18.042284 kernel: Speculative Store Bypass: Vulnerable Nov 1 00:58:18.042291 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Nov 1 00:58:18.042298 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Nov 1 00:58:18.042306 kernel: active return thunk: its_return_thunk Nov 1 00:58:18.042316 kernel: ITS: Mitigation: Aligned branch/return thunks Nov 1 00:58:18.042323 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Nov 1 00:58:18.042333 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Nov 1 00:58:18.042341 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Nov 1 00:58:18.042352 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Nov 1 00:58:18.042360 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Nov 1 00:58:18.042371 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Nov 1 00:58:18.042378 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Nov 1 00:58:18.042385 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Nov 1 00:58:18.042392 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Nov 1 00:58:18.042403 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Nov 1 00:58:18.042412 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Nov 1 00:58:18.042420 kernel: Freeing SMP alternatives memory: 32K Nov 1 00:58:18.042427 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:58:18.042434 kernel: LSM: Security Framework initializing Nov 1 00:58:18.042445 kernel: SELinux: Initializing. Nov 1 00:58:18.042455 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Nov 1 00:58:18.042464 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Nov 1 00:58:18.042471 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Nov 1 00:58:18.042479 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Nov 1 00:58:18.042489 kernel: signal: max sigframe size: 3632 Nov 1 00:58:18.042498 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:58:18.042506 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Nov 1 00:58:18.042514 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:58:18.042524 kernel: x86: Booting SMP configuration: Nov 1 00:58:18.042532 kernel: .... node #0, CPUs: #1 Nov 1 00:58:18.042544 kernel: Transient Scheduler Attacks: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Nov 1 00:58:18.042552 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Nov 1 00:58:18.042562 kernel: smp: Brought up 1 node, 2 CPUs Nov 1 00:58:18.042572 kernel: smpboot: Max logical packages: 1 Nov 1 00:58:18.042580 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Nov 1 00:58:18.042587 kernel: devtmpfs: initialized Nov 1 00:58:18.042595 kernel: x86/mm: Memory block size: 128MB Nov 1 00:58:18.042602 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Nov 1 00:58:18.042611 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:58:18.042621 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Nov 1 00:58:18.042628 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:58:18.042636 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:58:18.042643 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:58:18.042650 kernel: audit: type=2000 audit(1761958697.024:1): state=initialized audit_enabled=0 res=1 Nov 1 00:58:18.042657 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:58:18.042667 kernel: thermal_sys: Registered thermal governor 'user_space' Nov 1 00:58:18.042674 kernel: cpuidle: using governor menu Nov 1 00:58:18.042683 kernel: ACPI: bus type PCI registered Nov 1 00:58:18.042691 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:58:18.042698 kernel: dca service started, version 1.12.1 Nov 1 00:58:18.042705 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Nov 1 00:58:18.042712 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:58:18.042719 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:58:18.042730 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:58:18.042737 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:58:18.042747 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:58:18.042756 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:58:18.042764 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:58:18.042771 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:58:18.042778 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:58:18.042792 kernel: ACPI: Interpreter enabled Nov 1 00:58:18.042799 kernel: ACPI: PM: (supports S0 S5) Nov 1 00:58:18.042810 kernel: ACPI: Using IOAPIC for interrupt routing Nov 1 00:58:18.042817 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Nov 1 00:58:18.042824 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Nov 1 00:58:18.042837 kernel: iommu: Default domain type: Translated Nov 1 00:58:18.042846 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Nov 1 00:58:18.042854 kernel: vgaarb: loaded Nov 1 00:58:18.042861 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:58:18.042870 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:58:18.042879 kernel: PTP clock support registered Nov 1 00:58:18.042888 kernel: Registered efivars operations Nov 1 00:58:18.042897 kernel: PCI: Using ACPI for IRQ routing Nov 1 00:58:18.042904 kernel: PCI: System does not support PCI Nov 1 00:58:18.042915 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Nov 1 00:58:18.042924 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:58:18.042934 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:58:18.042941 kernel: pnp: PnP ACPI init Nov 1 00:58:18.042949 kernel: pnp: PnP ACPI: found 3 devices Nov 1 00:58:18.042959 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Nov 1 00:58:18.042966 kernel: NET: Registered PF_INET protocol family Nov 1 00:58:18.042976 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Nov 1 00:58:18.042984 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Nov 1 00:58:18.042997 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:58:18.043004 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:58:18.043014 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Nov 1 00:58:18.043022 kernel: TCP: Hash tables configured (established 65536 bind 65536) Nov 1 00:58:18.043029 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Nov 1 00:58:18.043040 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Nov 1 00:58:18.043047 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:58:18.043058 kernel: NET: Registered PF_XDP protocol family Nov 1 00:58:18.043067 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:58:18.043078 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Nov 1 00:58:18.043086 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Nov 1 00:58:18.043097 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Nov 1 00:58:18.043104 kernel: Initialise system trusted keyrings Nov 1 00:58:18.043113 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Nov 1 00:58:18.043122 kernel: Key type asymmetric registered Nov 1 00:58:18.043131 kernel: Asymmetric key parser 'x509' registered Nov 1 00:58:18.043139 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:58:18.043148 kernel: io scheduler mq-deadline registered Nov 1 00:58:18.043158 kernel: io scheduler kyber registered Nov 1 00:58:18.043169 kernel: io scheduler bfq registered Nov 1 00:58:18.043176 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Nov 1 00:58:18.043185 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:58:18.043194 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Nov 1 00:58:18.043204 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Nov 1 00:58:18.043212 kernel: i8042: PNP: No PS/2 controller found. Nov 1 00:58:18.043347 kernel: rtc_cmos 00:02: registered as rtc0 Nov 1 00:58:18.043475 kernel: rtc_cmos 00:02: setting system clock to 2025-11-01T00:58:17 UTC (1761958697) Nov 1 00:58:18.043588 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Nov 1 00:58:18.043606 kernel: intel_pstate: CPU model not supported Nov 1 00:58:18.043615 kernel: efifb: probing for efifb Nov 1 00:58:18.043622 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Nov 1 00:58:18.043634 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Nov 1 00:58:18.043649 kernel: efifb: scrolling: redraw Nov 1 00:58:18.043662 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Nov 1 00:58:18.043671 kernel: Console: switching to colour frame buffer device 128x48 Nov 1 00:58:18.043681 kernel: fb0: EFI VGA frame buffer device Nov 1 00:58:18.043699 kernel: pstore: Registered efi as persistent store backend Nov 1 00:58:18.043713 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:58:18.043726 kernel: Segment Routing with IPv6 Nov 1 00:58:18.043734 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:58:18.043741 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:58:18.043755 kernel: Key type dns_resolver registered Nov 1 00:58:18.043770 kernel: IPI shorthand broadcast: enabled Nov 1 00:58:18.043794 kernel: sched_clock: Marking stable (754341500, 21271200)->(963340500, -187727800) Nov 1 00:58:18.043804 kernel: registered taskstats version 1 Nov 1 00:58:18.043812 kernel: Loading compiled-in X.509 certificates Nov 1 00:58:18.043827 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: f2055682e6899ad8548fd369019e7b47939b46a0' Nov 1 00:58:18.043841 kernel: Key type .fscrypt registered Nov 1 00:58:18.043853 kernel: Key type fscrypt-provisioning registered Nov 1 00:58:18.043861 kernel: pstore: Using crash dump compression: deflate Nov 1 00:58:18.043868 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:58:18.043881 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:58:18.043901 kernel: ima: No architecture policies found Nov 1 00:58:18.043917 kernel: clk: Disabling unused clocks Nov 1 00:58:18.043931 kernel: Freeing unused kernel image (initmem) memory: 47496K Nov 1 00:58:18.043944 kernel: Write protecting the kernel read-only data: 28672k Nov 1 00:58:18.043958 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Nov 1 00:58:18.043968 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Nov 1 00:58:18.043976 kernel: Run /init as init process Nov 1 00:58:18.043984 kernel: with arguments: Nov 1 00:58:18.044000 kernel: /init Nov 1 00:58:18.044013 kernel: with environment: Nov 1 00:58:18.044030 kernel: HOME=/ Nov 1 00:58:18.044043 kernel: TERM=linux Nov 1 00:58:18.044057 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:58:18.044072 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:58:18.044082 systemd[1]: Detected virtualization microsoft. Nov 1 00:58:18.044095 systemd[1]: Detected architecture x86-64. Nov 1 00:58:18.044109 systemd[1]: Running in initrd. Nov 1 00:58:18.044123 systemd[1]: No hostname configured, using default hostname. Nov 1 00:58:18.044131 systemd[1]: Hostname set to . Nov 1 00:58:18.044142 systemd[1]: Initializing machine ID from random generator. Nov 1 00:58:18.044157 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:58:18.044173 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:58:18.044186 systemd[1]: Reached target cryptsetup.target. Nov 1 00:58:18.044195 systemd[1]: Reached target paths.target. Nov 1 00:58:18.044202 systemd[1]: Reached target slices.target. Nov 1 00:58:18.044218 systemd[1]: Reached target swap.target. Nov 1 00:58:18.044237 systemd[1]: Reached target timers.target. Nov 1 00:58:18.044253 systemd[1]: Listening on iscsid.socket. Nov 1 00:58:18.044262 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:58:18.044270 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:58:18.044283 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:58:18.044301 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:58:18.044316 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:58:18.044327 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:58:18.044335 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:58:18.044349 systemd[1]: Reached target sockets.target. Nov 1 00:58:18.044363 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:58:18.044371 systemd[1]: Finished network-cleanup.service. Nov 1 00:58:18.044379 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:58:18.044395 systemd[1]: Starting systemd-journald.service... Nov 1 00:58:18.044405 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:58:18.044413 systemd[1]: Starting systemd-resolved.service... Nov 1 00:58:18.044427 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:58:18.044442 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:58:18.044455 systemd-journald[183]: Journal started Nov 1 00:58:18.044505 systemd-journald[183]: Runtime Journal (/run/log/journal/7be257b7ef5845b682f58a7548aa3951) is 8.0M, max 159.0M, 151.0M free. Nov 1 00:58:18.044964 systemd-modules-load[184]: Inserted module 'overlay' Nov 1 00:58:18.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.074153 kernel: audit: type=1130 audit(1761958698.059:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.074188 systemd[1]: Started systemd-journald.service. Nov 1 00:58:18.087242 systemd-resolved[185]: Positive Trust Anchors: Nov 1 00:58:18.107761 kernel: audit: type=1130 audit(1761958698.086:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.087431 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:58:18.087467 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:58:18.132443 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:58:18.090142 systemd-resolved[185]: Defaulting to hostname 'linux'. Nov 1 00:58:18.136822 kernel: Bridge firewalling registered Nov 1 00:58:18.136541 systemd-modules-load[184]: Inserted module 'br_netfilter' Nov 1 00:58:18.139748 systemd[1]: Started systemd-resolved.service. Nov 1 00:58:18.144561 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:58:18.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.161493 kernel: audit: type=1130 audit(1761958698.143:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.161526 kernel: SCSI subsystem initialized Nov 1 00:58:18.161465 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:58:18.187931 kernel: audit: type=1130 audit(1761958698.160:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.177522 systemd[1]: Reached target nss-lookup.target. Nov 1 00:58:18.180594 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:58:18.183482 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:58:18.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.207648 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:58:18.209972 kernel: audit: type=1130 audit(1761958698.177:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.221145 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:58:18.221179 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:58:18.226033 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:58:18.226061 kernel: audit: type=1130 audit(1761958698.225:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.225509 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:58:18.241657 systemd-modules-load[184]: Inserted module 'dm_multipath' Nov 1 00:58:18.254860 kernel: audit: type=1130 audit(1761958698.241:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.254737 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:58:18.259369 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:58:18.276875 kernel: audit: type=1130 audit(1761958698.258:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.262243 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:58:18.283037 dracut-cmdline[202]: dracut-dracut-053 Nov 1 00:58:18.285192 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:58:18.287334 dracut-cmdline[202]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:58:18.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.318808 kernel: audit: type=1130 audit(1761958698.304:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.347812 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:58:18.366811 kernel: iscsi: registered transport (tcp) Nov 1 00:58:18.393176 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:58:18.393237 kernel: QLogic iSCSI HBA Driver Nov 1 00:58:18.422945 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:58:18.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.428394 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:58:18.477815 kernel: raid6: avx512x4 gen() 18398 MB/s Nov 1 00:58:18.497800 kernel: raid6: avx512x4 xor() 8693 MB/s Nov 1 00:58:18.517799 kernel: raid6: avx512x2 gen() 18416 MB/s Nov 1 00:58:18.537804 kernel: raid6: avx512x2 xor() 29830 MB/s Nov 1 00:58:18.556797 kernel: raid6: avx512x1 gen() 18541 MB/s Nov 1 00:58:18.576796 kernel: raid6: avx512x1 xor() 26875 MB/s Nov 1 00:58:18.599798 kernel: raid6: avx2x4 gen() 18309 MB/s Nov 1 00:58:18.619796 kernel: raid6: avx2x4 xor() 8005 MB/s Nov 1 00:58:18.639796 kernel: raid6: avx2x2 gen() 18474 MB/s Nov 1 00:58:18.660798 kernel: raid6: avx2x2 xor() 22149 MB/s Nov 1 00:58:18.680796 kernel: raid6: avx2x1 gen() 13998 MB/s Nov 1 00:58:18.700796 kernel: raid6: avx2x1 xor() 19491 MB/s Nov 1 00:58:18.720797 kernel: raid6: sse2x4 gen() 11690 MB/s Nov 1 00:58:18.740796 kernel: raid6: sse2x4 xor() 7321 MB/s Nov 1 00:58:18.760795 kernel: raid6: sse2x2 gen() 12846 MB/s Nov 1 00:58:18.781797 kernel: raid6: sse2x2 xor() 7501 MB/s Nov 1 00:58:18.801796 kernel: raid6: sse2x1 gen() 11633 MB/s Nov 1 00:58:18.824463 kernel: raid6: sse2x1 xor() 5888 MB/s Nov 1 00:58:18.824495 kernel: raid6: using algorithm avx512x1 gen() 18541 MB/s Nov 1 00:58:18.824508 kernel: raid6: .... xor() 26875 MB/s, rmw enabled Nov 1 00:58:18.831070 kernel: raid6: using avx512x2 recovery algorithm Nov 1 00:58:18.847809 kernel: xor: automatically using best checksumming function avx Nov 1 00:58:18.944811 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Nov 1 00:58:18.952418 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:58:18.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.954000 audit: BPF prog-id=7 op=LOAD Nov 1 00:58:18.954000 audit: BPF prog-id=8 op=LOAD Nov 1 00:58:18.955484 systemd[1]: Starting systemd-udevd.service... Nov 1 00:58:18.972833 systemd-udevd[383]: Using default interface naming scheme 'v252'. Nov 1 00:58:18.981505 systemd[1]: Started systemd-udevd.service. Nov 1 00:58:18.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:18.985256 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:58:18.999688 dracut-pre-trigger[387]: rd.md=0: removing MD RAID activation Nov 1 00:58:19.027215 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:58:19.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:19.033097 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:58:19.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:19.066500 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:58:19.128808 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:58:19.137870 kernel: hv_vmbus: Vmbus version:5.2 Nov 1 00:58:19.162557 kernel: AVX2 version of gcm_enc/dec engaged. Nov 1 00:58:19.162603 kernel: AES CTR mode by8 optimization enabled Nov 1 00:58:19.175806 kernel: hv_vmbus: registering driver hv_storvsc Nov 1 00:58:19.184824 kernel: hv_vmbus: registering driver hyperv_keyboard Nov 1 00:58:19.184866 kernel: hid: raw HID events driver (C) Jiri Kosina Nov 1 00:58:19.194447 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Nov 1 00:58:19.194482 kernel: scsi host0: storvsc_host_t Nov 1 00:58:19.200006 kernel: scsi host1: storvsc_host_t Nov 1 00:58:19.206860 kernel: hv_vmbus: registering driver hv_netvsc Nov 1 00:58:19.219439 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Nov 1 00:58:19.219513 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Nov 1 00:58:19.236804 kernel: hv_vmbus: registering driver hid_hyperv Nov 1 00:58:19.248970 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Nov 1 00:58:19.249005 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Nov 1 00:58:19.277068 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Nov 1 00:58:19.279277 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Nov 1 00:58:19.279296 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Nov 1 00:58:19.293863 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Nov 1 00:58:19.316302 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Nov 1 00:58:19.316478 kernel: sd 0:0:0:0: [sda] Write Protect is off Nov 1 00:58:19.316643 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Nov 1 00:58:19.316824 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Nov 1 00:58:19.316996 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:58:19.317019 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Nov 1 00:58:19.397925 kernel: hv_netvsc 6045bdd1-8ab7-6045-bdd1-8ab76045bdd1 eth0: VF slot 1 added Nov 1 00:58:19.406801 kernel: hv_vmbus: registering driver hv_pci Nov 1 00:58:19.412804 kernel: hv_pci cf89fa15-15a4-4211-a2df-1da4abc80cdb: PCI VMBus probing: Using version 0x10004 Nov 1 00:58:19.469023 kernel: hv_pci cf89fa15-15a4-4211-a2df-1da4abc80cdb: PCI host bridge to bus 15a4:00 Nov 1 00:58:19.469203 kernel: pci_bus 15a4:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Nov 1 00:58:19.469380 kernel: pci_bus 15a4:00: No busn resource found for root bus, will use [bus 00-ff] Nov 1 00:58:19.469536 kernel: pci 15a4:00:02.0: [15b3:1016] type 00 class 0x020000 Nov 1 00:58:19.469721 kernel: pci 15a4:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Nov 1 00:58:19.469903 kernel: pci 15a4:00:02.0: enabling Extended Tags Nov 1 00:58:19.470074 kernel: pci 15a4:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 15a4:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Nov 1 00:58:19.470238 kernel: pci_bus 15a4:00: busn_res: [bus 00-ff] end is updated to 00 Nov 1 00:58:19.470389 kernel: pci 15a4:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Nov 1 00:58:19.560816 kernel: mlx5_core 15a4:00:02.0: enabling device (0000 -> 0002) Nov 1 00:58:19.838098 kernel: mlx5_core 15a4:00:02.0: firmware version: 14.30.5006 Nov 1 00:58:19.838284 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (436) Nov 1 00:58:19.838303 kernel: mlx5_core 15a4:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Nov 1 00:58:19.838444 kernel: mlx5_core 15a4:00:02.0: Supported tc offload range - chains: 1, prios: 1 Nov 1 00:58:19.838546 kernel: mlx5_core 15a4:00:02.0: mlx5e_tc_post_act_init:40:(pid 187): firmware level support is missing Nov 1 00:58:19.838645 kernel: hv_netvsc 6045bdd1-8ab7-6045-bdd1-8ab76045bdd1 eth0: VF registering: eth1 Nov 1 00:58:19.838746 kernel: mlx5_core 15a4:00:02.0 eth1: joined to eth0 Nov 1 00:58:19.675393 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:58:19.714385 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:58:19.828217 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:58:19.852804 kernel: mlx5_core 15a4:00:02.0 enP5540s1: renamed from eth1 Nov 1 00:58:19.910125 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:58:19.913228 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:58:19.914154 systemd[1]: Starting disk-uuid.service... Nov 1 00:58:19.939807 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:58:19.951809 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:58:19.959803 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:58:20.962807 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:58:20.963339 disk-uuid[556]: The operation has completed successfully. Nov 1 00:58:21.053519 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:58:21.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.053623 systemd[1]: Finished disk-uuid.service. Nov 1 00:58:21.061694 systemd[1]: Starting verity-setup.service... Nov 1 00:58:21.098997 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Nov 1 00:58:21.491676 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:58:21.495005 systemd[1]: Finished verity-setup.service. Nov 1 00:58:21.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.498664 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:58:21.576906 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:58:21.577304 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:58:21.581151 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:58:21.585434 systemd[1]: Starting ignition-setup.service... Nov 1 00:58:21.590208 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:58:21.611311 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:58:21.611357 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:58:21.611370 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:58:21.663025 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:58:21.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.667000 audit: BPF prog-id=9 op=LOAD Nov 1 00:58:21.669170 systemd[1]: Starting systemd-networkd.service... Nov 1 00:58:21.693629 systemd-networkd[823]: lo: Link UP Nov 1 00:58:21.693639 systemd-networkd[823]: lo: Gained carrier Nov 1 00:58:21.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.694194 systemd-networkd[823]: Enumeration completed Nov 1 00:58:21.694261 systemd[1]: Started systemd-networkd.service. Nov 1 00:58:21.697707 systemd[1]: Reached target network.target. Nov 1 00:58:21.700892 systemd-networkd[823]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:58:21.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.702355 systemd[1]: Starting iscsiuio.service... Nov 1 00:58:21.709624 systemd[1]: Started iscsiuio.service. Nov 1 00:58:21.718812 systemd[1]: Starting iscsid.service... Nov 1 00:58:21.724338 iscsid[829]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:58:21.724338 iscsid[829]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:58:21.724338 iscsid[829]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:58:21.724338 iscsid[829]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:58:21.724338 iscsid[829]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:58:21.748609 iscsid[829]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:58:21.730020 systemd[1]: Started iscsid.service. Nov 1 00:58:21.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.756258 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:58:21.766143 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:58:21.769945 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:58:21.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.774527 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:58:21.778616 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:58:21.785211 systemd[1]: Reached target remote-fs.target. Nov 1 00:58:21.791107 kernel: mlx5_core 15a4:00:02.0 enP5540s1: Link up Nov 1 00:58:21.789826 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:58:21.799773 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:58:21.804141 kernel: buffer_size[0]=0 is not enough for lossless buffer Nov 1 00:58:21.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:21.843667 kernel: hv_netvsc 6045bdd1-8ab7-6045-bdd1-8ab76045bdd1 eth0: Data path switched to VF: enP5540s1 Nov 1 00:58:21.843912 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:58:21.844056 systemd-networkd[823]: enP5540s1: Link UP Nov 1 00:58:21.844194 systemd-networkd[823]: eth0: Link UP Nov 1 00:58:21.844413 systemd-networkd[823]: eth0: Gained carrier Nov 1 00:58:21.852990 systemd-networkd[823]: enP5540s1: Gained carrier Nov 1 00:58:21.870859 systemd-networkd[823]: eth0: DHCPv4 address 10.200.4.8/24, gateway 10.200.4.1 acquired from 168.63.129.16 Nov 1 00:58:22.062107 systemd[1]: Finished ignition-setup.service. Nov 1 00:58:22.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:22.067215 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:58:23.109037 systemd-networkd[823]: eth0: Gained IPv6LL Nov 1 00:58:25.261126 ignition[849]: Ignition 2.14.0 Nov 1 00:58:25.261145 ignition[849]: Stage: fetch-offline Nov 1 00:58:25.261232 ignition[849]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:58:25.261285 ignition[849]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:58:25.374015 ignition[849]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:58:25.374237 ignition[849]: parsed url from cmdline: "" Nov 1 00:58:25.374242 ignition[849]: no config URL provided Nov 1 00:58:25.374250 ignition[849]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:58:25.374259 ignition[849]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:58:25.374271 ignition[849]: failed to fetch config: resource requires networking Nov 1 00:58:25.383889 ignition[849]: Ignition finished successfully Nov 1 00:58:25.388835 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:58:25.397954 kernel: kauditd_printk_skb: 18 callbacks suppressed Nov 1 00:58:25.397978 kernel: audit: type=1130 audit(1761958705.391:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.392414 systemd[1]: Starting ignition-fetch.service... Nov 1 00:58:25.417915 ignition[855]: Ignition 2.14.0 Nov 1 00:58:25.417922 ignition[855]: Stage: fetch Nov 1 00:58:25.418030 ignition[855]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:58:25.418056 ignition[855]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:58:25.446517 ignition[855]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:58:25.446746 ignition[855]: parsed url from cmdline: "" Nov 1 00:58:25.446751 ignition[855]: no config URL provided Nov 1 00:58:25.446758 ignition[855]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:58:25.446768 ignition[855]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:58:25.447077 ignition[855]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Nov 1 00:58:25.548432 ignition[855]: GET result: OK Nov 1 00:58:25.548538 ignition[855]: config has been read from IMDS userdata Nov 1 00:58:25.548580 ignition[855]: parsing config with SHA512: 3d3ac961e23b4823c3b669e78d15908a2ecad9802eca00b9ccc31374f53fa67c593a6718fa8c3d9f4d2211b53e86790c6053b42940782560a3155e1f5ad1e8b3 Nov 1 00:58:25.552617 unknown[855]: fetched base config from "system" Nov 1 00:58:25.553383 ignition[855]: fetch: fetch complete Nov 1 00:58:25.552628 unknown[855]: fetched base config from "system" Nov 1 00:58:25.553393 ignition[855]: fetch: fetch passed Nov 1 00:58:25.552636 unknown[855]: fetched user config from "azure" Nov 1 00:58:25.553452 ignition[855]: Ignition finished successfully Nov 1 00:58:25.565251 systemd[1]: Finished ignition-fetch.service. Nov 1 00:58:25.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.566718 systemd[1]: Starting ignition-kargs.service... Nov 1 00:58:25.581799 kernel: audit: type=1130 audit(1761958705.564:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.589818 ignition[861]: Ignition 2.14.0 Nov 1 00:58:25.589829 ignition[861]: Stage: kargs Nov 1 00:58:25.589961 ignition[861]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:58:25.589993 ignition[861]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:58:25.600391 ignition[861]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:58:25.601583 ignition[861]: kargs: kargs passed Nov 1 00:58:25.601625 ignition[861]: Ignition finished successfully Nov 1 00:58:25.606033 systemd[1]: Finished ignition-kargs.service. Nov 1 00:58:25.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.624808 kernel: audit: type=1130 audit(1761958705.610:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.624815 systemd[1]: Starting ignition-disks.service... Nov 1 00:58:25.634821 ignition[867]: Ignition 2.14.0 Nov 1 00:58:25.634831 ignition[867]: Stage: disks Nov 1 00:58:25.634966 ignition[867]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:58:25.634999 ignition[867]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:58:25.639414 ignition[867]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:58:25.641062 ignition[867]: disks: disks passed Nov 1 00:58:25.641899 systemd[1]: Finished ignition-disks.service. Nov 1 00:58:25.641119 ignition[867]: Ignition finished successfully Nov 1 00:58:25.672442 kernel: audit: type=1130 audit(1761958705.645:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.646355 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:58:25.650020 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:58:25.652024 systemd[1]: Reached target local-fs.target. Nov 1 00:58:25.655836 systemd[1]: Reached target sysinit.target. Nov 1 00:58:25.668430 systemd[1]: Reached target basic.target. Nov 1 00:58:25.675043 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:58:25.750917 systemd-fsck[875]: ROOT: clean, 637/7326000 files, 481088/7359488 blocks Nov 1 00:58:25.760425 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:58:25.782064 kernel: audit: type=1130 audit(1761958705.765:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:25.767215 systemd[1]: Mounting sysroot.mount... Nov 1 00:58:25.797806 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:58:25.798174 systemd[1]: Mounted sysroot.mount. Nov 1 00:58:25.800021 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:58:25.830583 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:58:25.834010 systemd[1]: Starting flatcar-metadata-hostname.service... Nov 1 00:58:25.836997 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:58:25.837039 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:58:25.841641 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:58:25.887493 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:58:25.893183 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:58:25.908812 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (886) Nov 1 00:58:25.908847 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:58:25.911639 initrd-setup-root[891]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:58:25.923111 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:58:25.923129 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:58:25.930444 initrd-setup-root[915]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:58:25.947341 initrd-setup-root[923]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:58:25.963206 initrd-setup-root[931]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:58:26.091886 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:58:26.473418 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:58:26.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:26.476518 systemd[1]: Starting ignition-mount.service... Nov 1 00:58:26.500624 kernel: audit: type=1130 audit(1761958706.474:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:26.493280 systemd[1]: Starting sysroot-boot.service... Nov 1 00:58:26.501370 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Nov 1 00:58:26.501469 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Nov 1 00:58:26.525176 systemd[1]: Finished sysroot-boot.service. Nov 1 00:58:26.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:26.539809 kernel: audit: type=1130 audit(1761958706.526:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:26.955125 ignition[956]: INFO : Ignition 2.14.0 Nov 1 00:58:26.955125 ignition[956]: INFO : Stage: mount Nov 1 00:58:26.961567 ignition[956]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:58:26.961567 ignition[956]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:58:26.961567 ignition[956]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:58:26.974458 ignition[956]: INFO : mount: mount passed Nov 1 00:58:26.974458 ignition[956]: INFO : Ignition finished successfully Nov 1 00:58:26.978466 systemd[1]: Finished ignition-mount.service. Nov 1 00:58:26.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:26.994801 kernel: audit: type=1130 audit(1761958706.982:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:27.350762 coreos-metadata[885]: Nov 01 00:58:27.350 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Nov 1 00:58:27.368254 coreos-metadata[885]: Nov 01 00:58:27.368 INFO Fetch successful Nov 1 00:58:27.406272 coreos-metadata[885]: Nov 01 00:58:27.406 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Nov 1 00:58:27.417688 coreos-metadata[885]: Nov 01 00:58:27.417 INFO Fetch successful Nov 1 00:58:27.432606 coreos-metadata[885]: Nov 01 00:58:27.432 INFO wrote hostname ci-3510.3.8-n-9d78d981c4 to /sysroot/etc/hostname Nov 1 00:58:27.434576 systemd[1]: Finished flatcar-metadata-hostname.service. Nov 1 00:58:27.439511 systemd[1]: Starting ignition-files.service... Nov 1 00:58:27.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:27.460176 kernel: audit: type=1130 audit(1761958707.437:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:27.457914 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:58:27.503805 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (964) Nov 1 00:58:27.503857 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:58:27.514447 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:58:27.514472 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:58:27.794079 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:58:27.806490 ignition[983]: INFO : Ignition 2.14.0 Nov 1 00:58:27.806490 ignition[983]: INFO : Stage: files Nov 1 00:58:27.810269 ignition[983]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:58:27.810269 ignition[983]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:58:27.823577 ignition[983]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:58:27.844208 ignition[983]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:58:27.847309 ignition[983]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:58:27.847309 ignition[983]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:58:27.903256 ignition[983]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:58:27.907607 ignition[983]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:58:27.907607 ignition[983]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:58:27.904245 unknown[983]: wrote ssh authorized keys file for user: core Nov 1 00:58:27.924000 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Nov 1 00:58:27.928863 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Nov 1 00:58:27.982513 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Nov 1 00:58:28.058397 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Nov 1 00:58:28.058397 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:58:28.067748 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:58:28.067748 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:58:28.076568 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:58:28.080747 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:58:28.085202 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:58:28.090159 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:58:28.090159 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:58:28.090159 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:58:28.090159 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:58:28.090159 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:58:28.090159 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:58:28.090159 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Nov 1 00:58:28.090159 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3880305217" Nov 1 00:58:28.132480 ignition[983]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3880305217": device or resource busy Nov 1 00:58:28.132480 ignition[983]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3880305217", trying btrfs: device or resource busy Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3880305217" Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3880305217" Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem3880305217" Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem3880305217" Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3284858357" Nov 1 00:58:28.132480 ignition[983]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3284858357": device or resource busy Nov 1 00:58:28.132480 ignition[983]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3284858357", trying btrfs: device or resource busy Nov 1 00:58:28.132480 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3284858357" Nov 1 00:58:28.100502 systemd[1]: mnt-oem3880305217.mount: Deactivated successfully. Nov 1 00:58:28.204939 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3284858357" Nov 1 00:58:28.204939 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem3284858357" Nov 1 00:58:28.204939 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem3284858357" Nov 1 00:58:28.204939 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:58:28.204939 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:58:28.204939 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Nov 1 00:58:28.122702 systemd[1]: mnt-oem3284858357.mount: Deactivated successfully. Nov 1 00:58:28.419727 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Nov 1 00:58:28.878887 ignition[983]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:58:28.878887 ignition[983]: INFO : files: op(13): [started] processing unit "waagent.service" Nov 1 00:58:28.878887 ignition[983]: INFO : files: op(13): [finished] processing unit "waagent.service" Nov 1 00:58:28.878887 ignition[983]: INFO : files: op(14): [started] processing unit "nvidia.service" Nov 1 00:58:28.878887 ignition[983]: INFO : files: op(14): [finished] processing unit "nvidia.service" Nov 1 00:58:28.878887 ignition[983]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:58:28.901295 ignition[983]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:58:28.901295 ignition[983]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:58:28.901295 ignition[983]: INFO : files: files passed Nov 1 00:58:28.901295 ignition[983]: INFO : Ignition finished successfully Nov 1 00:58:28.946194 systemd[1]: Finished ignition-files.service. Nov 1 00:58:28.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:28.952950 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:58:28.962814 kernel: audit: type=1130 audit(1761958708.948:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:28.967676 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:58:28.973263 systemd[1]: Starting ignition-quench.service... Nov 1 00:58:28.977535 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:58:28.979853 initrd-setup-root-after-ignition[1008]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:58:28.983666 systemd[1]: Finished ignition-quench.service. Nov 1 00:58:28.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:28.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:28.987986 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:58:28.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:28.990563 systemd[1]: Reached target ignition-complete.target. Nov 1 00:58:28.995661 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:58:29.011741 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:58:29.014246 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:58:29.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.020351 systemd[1]: Reached target initrd-fs.target. Nov 1 00:58:29.024330 systemd[1]: Reached target initrd.target. Nov 1 00:58:29.027899 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:58:29.031765 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:58:29.042654 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:58:29.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.047658 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:58:29.057542 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:58:29.061921 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:58:29.067245 systemd[1]: Stopped target timers.target. Nov 1 00:58:29.071172 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:58:29.071300 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:58:29.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.075921 systemd[1]: Stopped target initrd.target. Nov 1 00:58:29.079862 systemd[1]: Stopped target basic.target. Nov 1 00:58:29.083896 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:58:29.087956 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:58:29.092048 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:58:29.096849 systemd[1]: Stopped target remote-fs.target. Nov 1 00:58:29.102672 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:58:29.107190 systemd[1]: Stopped target sysinit.target. Nov 1 00:58:29.111332 systemd[1]: Stopped target local-fs.target. Nov 1 00:58:29.115592 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:58:29.119871 systemd[1]: Stopped target swap.target. Nov 1 00:58:29.123742 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:58:29.126479 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:58:29.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.128733 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:58:29.132558 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:58:29.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.132692 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:58:29.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.136931 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:58:29.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.137065 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:58:29.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.141981 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:58:29.142106 systemd[1]: Stopped ignition-files.service. Nov 1 00:58:29.147827 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Nov 1 00:58:29.147985 systemd[1]: Stopped flatcar-metadata-hostname.service. Nov 1 00:58:29.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.153832 systemd[1]: Stopping ignition-mount.service... Nov 1 00:58:29.188823 ignition[1021]: INFO : Ignition 2.14.0 Nov 1 00:58:29.188823 ignition[1021]: INFO : Stage: umount Nov 1 00:58:29.188823 ignition[1021]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:58:29.188823 ignition[1021]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:58:29.202187 iscsid[829]: iscsid shutting down. Nov 1 00:58:29.168678 systemd[1]: Stopping iscsid.service... Nov 1 00:58:29.207293 ignition[1021]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:58:29.207293 ignition[1021]: INFO : umount: umount passed Nov 1 00:58:29.207293 ignition[1021]: INFO : Ignition finished successfully Nov 1 00:58:29.168759 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:58:29.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.168921 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:58:29.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.170272 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:58:29.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.170515 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:58:29.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.170654 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:58:29.171116 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:58:29.171248 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:58:29.173396 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:58:29.173517 systemd[1]: Stopped iscsid.service. Nov 1 00:58:29.175133 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:58:29.175233 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:58:29.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.178498 systemd[1]: Stopping iscsiuio.service... Nov 1 00:58:29.178859 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:58:29.178945 systemd[1]: Stopped iscsiuio.service. Nov 1 00:58:29.204647 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:58:29.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.204732 systemd[1]: Stopped ignition-mount.service. Nov 1 00:58:29.219050 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:58:29.219353 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:58:29.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.219392 systemd[1]: Stopped ignition-disks.service. Nov 1 00:58:29.294000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:58:29.221926 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:58:29.221976 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:58:29.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.226014 systemd[1]: ignition-fetch.service: Deactivated successfully. Nov 1 00:58:29.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.226062 systemd[1]: Stopped ignition-fetch.service. Nov 1 00:58:29.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.229937 systemd[1]: Stopped target network.target. Nov 1 00:58:29.231898 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:58:29.231941 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:58:29.236559 systemd[1]: Stopped target paths.target. Nov 1 00:58:29.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.238528 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:58:29.243834 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:58:29.247402 systemd[1]: Stopped target slices.target. Nov 1 00:58:29.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.249164 systemd[1]: Stopped target sockets.target. Nov 1 00:58:29.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.253196 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:58:29.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.253245 systemd[1]: Closed iscsid.socket. Nov 1 00:58:29.256616 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:58:29.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.256657 systemd[1]: Closed iscsiuio.socket. Nov 1 00:58:29.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.260521 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:58:29.372566 kernel: hv_netvsc 6045bdd1-8ab7-6045-bdd1-8ab76045bdd1 eth0: Data path switched from VF: enP5540s1 Nov 1 00:58:29.260573 systemd[1]: Stopped ignition-setup.service. Nov 1 00:58:29.264541 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:58:29.268149 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:58:29.278893 systemd-networkd[823]: eth0: DHCPv6 lease lost Nov 1 00:58:29.378000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:58:29.280838 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:58:29.280944 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:58:29.288054 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:58:29.288155 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:58:29.295245 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:58:29.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.295284 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:58:29.299095 systemd[1]: Stopping network-cleanup.service... Nov 1 00:58:29.302516 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:58:29.302601 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:58:29.306494 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:58:29.306550 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:58:29.310890 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:58:29.310941 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:58:29.314930 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:58:29.319777 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:58:29.323622 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:58:29.323760 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:58:29.327433 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:58:29.327470 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:58:29.331899 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:58:29.331938 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:58:29.336398 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:58:29.336449 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:58:29.340323 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:58:29.340372 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:58:29.344069 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:58:29.344127 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:58:29.349254 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:58:29.357844 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:58:29.357895 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:58:29.360441 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:58:29.360535 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:58:29.390687 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:58:29.390809 systemd[1]: Stopped network-cleanup.service. Nov 1 00:58:29.739839 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:58:29.739981 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:58:29.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.746414 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:58:29.750854 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:58:29.750928 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:58:29.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:29.757960 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:58:29.768908 systemd[1]: Switching root. Nov 1 00:58:29.793725 systemd-journald[183]: Journal stopped Nov 1 00:58:44.536315 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Nov 1 00:58:44.536346 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:58:44.536359 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:58:44.536370 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:58:44.536379 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:58:44.536388 kernel: SELinux: policy capability open_perms=1 Nov 1 00:58:44.536401 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:58:44.536413 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:58:44.536422 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:58:44.536432 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:58:44.536440 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:58:44.536450 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:58:44.536458 kernel: kauditd_printk_skb: 42 callbacks suppressed Nov 1 00:58:44.536470 kernel: audit: type=1403 audit(1761958712.371:81): auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:58:44.536482 systemd[1]: Successfully loaded SELinux policy in 311.199ms. Nov 1 00:58:44.536495 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 25.949ms. Nov 1 00:58:44.536508 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:58:44.536518 systemd[1]: Detected virtualization microsoft. Nov 1 00:58:44.536530 systemd[1]: Detected architecture x86-64. Nov 1 00:58:44.536540 systemd[1]: Detected first boot. Nov 1 00:58:44.536553 systemd[1]: Hostname set to . Nov 1 00:58:44.536562 systemd[1]: Initializing machine ID from random generator. Nov 1 00:58:44.536574 kernel: audit: type=1400 audit(1761958713.114:82): avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:58:44.536584 kernel: audit: type=1400 audit(1761958713.129:83): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:58:44.536596 kernel: audit: type=1400 audit(1761958713.129:84): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:58:44.536607 kernel: audit: type=1334 audit(1761958713.143:85): prog-id=10 op=LOAD Nov 1 00:58:44.536617 kernel: audit: type=1334 audit(1761958713.143:86): prog-id=10 op=UNLOAD Nov 1 00:58:44.536628 kernel: audit: type=1334 audit(1761958713.154:87): prog-id=11 op=LOAD Nov 1 00:58:44.536639 kernel: audit: type=1334 audit(1761958713.154:88): prog-id=11 op=UNLOAD Nov 1 00:58:44.536648 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:58:44.536657 kernel: audit: type=1400 audit(1761958714.396:89): avc: denied { associate } for pid=1054 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:58:44.536669 kernel: audit: type=1300 audit(1761958714.396:89): arch=c000003e syscall=188 success=yes exit=0 a0=c00014d892 a1=c0000cedf8 a2=c0000d70c0 a3=32 items=0 ppid=1037 pid=1054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:58:44.536683 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:58:44.536693 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:58:44.536703 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:58:44.536716 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:58:44.536727 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:58:44.536736 kernel: audit: type=1334 audit(1761958724.013:91): prog-id=12 op=LOAD Nov 1 00:58:44.536745 kernel: audit: type=1334 audit(1761958724.013:92): prog-id=3 op=UNLOAD Nov 1 00:58:44.536758 kernel: audit: type=1334 audit(1761958724.018:93): prog-id=13 op=LOAD Nov 1 00:58:44.536772 kernel: audit: type=1334 audit(1761958724.022:94): prog-id=14 op=LOAD Nov 1 00:58:44.536781 kernel: audit: type=1334 audit(1761958724.022:95): prog-id=4 op=UNLOAD Nov 1 00:58:44.536802 kernel: audit: type=1334 audit(1761958724.022:96): prog-id=5 op=UNLOAD Nov 1 00:58:44.536814 kernel: audit: type=1334 audit(1761958724.027:97): prog-id=15 op=LOAD Nov 1 00:58:44.536824 kernel: audit: type=1334 audit(1761958724.027:98): prog-id=12 op=UNLOAD Nov 1 00:58:44.536832 kernel: audit: type=1334 audit(1761958724.047:99): prog-id=16 op=LOAD Nov 1 00:58:44.536844 kernel: audit: type=1334 audit(1761958724.051:100): prog-id=17 op=LOAD Nov 1 00:58:44.536854 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:58:44.536870 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:58:44.536881 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:58:44.536893 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:58:44.536906 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:58:44.536916 systemd[1]: Created slice system-getty.slice. Nov 1 00:58:44.536926 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:58:44.536938 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:58:44.536951 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:58:44.536963 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:58:44.536975 systemd[1]: Created slice user.slice. Nov 1 00:58:44.536985 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:58:44.536998 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:58:44.537007 systemd[1]: Set up automount boot.automount. Nov 1 00:58:44.537019 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:58:44.537030 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:58:44.537042 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:58:44.537051 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:58:44.537066 systemd[1]: Reached target integritysetup.target. Nov 1 00:58:44.537078 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:58:44.537088 systemd[1]: Reached target remote-fs.target. Nov 1 00:58:44.537098 systemd[1]: Reached target slices.target. Nov 1 00:58:44.537111 systemd[1]: Reached target swap.target. Nov 1 00:58:44.537124 systemd[1]: Reached target torcx.target. Nov 1 00:58:44.537134 systemd[1]: Reached target veritysetup.target. Nov 1 00:58:44.537148 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:58:44.537158 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:58:44.537171 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:58:44.537181 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:58:44.537195 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:58:44.537209 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:58:44.537220 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:58:44.537229 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:58:44.537242 systemd[1]: Mounting media.mount... Nov 1 00:58:44.537254 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:58:44.537265 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:58:44.537276 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:58:44.537288 systemd[1]: Mounting tmp.mount... Nov 1 00:58:44.537301 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:58:44.537313 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:58:44.537325 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:58:44.537335 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:58:44.537348 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:58:44.537359 systemd[1]: Starting modprobe@drm.service... Nov 1 00:58:44.537372 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:58:44.537382 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:58:44.537394 systemd[1]: Starting modprobe@loop.service... Nov 1 00:58:44.537404 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:58:44.537419 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:58:44.537431 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:58:44.537441 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:58:44.537452 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:58:44.537464 systemd[1]: Stopped systemd-journald.service. Nov 1 00:58:44.537477 systemd[1]: Starting systemd-journald.service... Nov 1 00:58:44.537487 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:58:44.537500 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:58:44.537513 kernel: loop: module loaded Nov 1 00:58:44.537524 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:58:44.537539 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:58:44.537557 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:58:44.537576 systemd[1]: Stopped verity-setup.service. Nov 1 00:58:44.537595 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:58:44.537614 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:58:44.537636 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:58:44.537660 systemd[1]: Mounted media.mount. Nov 1 00:58:44.537681 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:58:44.537701 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:58:44.537721 systemd[1]: Mounted tmp.mount. Nov 1 00:58:44.537740 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:58:44.537761 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:58:44.537781 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:58:44.537822 kernel: fuse: init (API version 7.34) Nov 1 00:58:44.537848 systemd-journald[1147]: Journal started Nov 1 00:58:44.537921 systemd-journald[1147]: Runtime Journal (/run/log/journal/e5b6791bbe0c4470bda8a0877f687825) is 8.0M, max 159.0M, 151.0M free. Nov 1 00:58:32.371000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:58:33.114000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:58:33.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:58:33.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:58:33.143000 audit: BPF prog-id=10 op=LOAD Nov 1 00:58:33.143000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:58:33.154000 audit: BPF prog-id=11 op=LOAD Nov 1 00:58:33.154000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:58:34.396000 audit[1054]: AVC avc: denied { associate } for pid=1054 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:58:34.396000 audit[1054]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d892 a1=c0000cedf8 a2=c0000d70c0 a3=32 items=0 ppid=1037 pid=1054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:58:34.396000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:58:34.405000 audit[1054]: AVC avc: denied { associate } for pid=1054 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:58:34.405000 audit[1054]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d969 a2=1ed a3=0 items=2 ppid=1037 pid=1054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:58:34.405000 audit: CWD cwd="/" Nov 1 00:58:34.405000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:34.405000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:34.405000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:58:44.013000 audit: BPF prog-id=12 op=LOAD Nov 1 00:58:44.013000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:58:44.018000 audit: BPF prog-id=13 op=LOAD Nov 1 00:58:44.022000 audit: BPF prog-id=14 op=LOAD Nov 1 00:58:44.022000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:58:44.022000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:58:44.027000 audit: BPF prog-id=15 op=LOAD Nov 1 00:58:44.027000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:58:44.047000 audit: BPF prog-id=16 op=LOAD Nov 1 00:58:44.051000 audit: BPF prog-id=17 op=LOAD Nov 1 00:58:44.051000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:58:44.051000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:58:44.056000 audit: BPF prog-id=18 op=LOAD Nov 1 00:58:44.056000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:58:44.060000 audit: BPF prog-id=19 op=LOAD Nov 1 00:58:44.065000 audit: BPF prog-id=20 op=LOAD Nov 1 00:58:44.065000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:58:44.065000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:58:44.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.084000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:58:44.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.408000 audit: BPF prog-id=21 op=LOAD Nov 1 00:58:44.408000 audit: BPF prog-id=22 op=LOAD Nov 1 00:58:44.408000 audit: BPF prog-id=23 op=LOAD Nov 1 00:58:44.408000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:58:44.408000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:58:44.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.532000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:58:44.532000 audit[1147]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd51573e20 a2=4000 a3=7ffd51573ebc items=0 ppid=1 pid=1147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:58:44.532000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:58:34.349866 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:58:44.012686 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:58:34.350660 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:58:44.012698 systemd[1]: Unnecessary job was removed for dev-sda6.device. Nov 1 00:58:34.350683 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:58:44.066889 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:58:34.350721 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:58:34.350732 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:58:34.350783 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:58:34.350810 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:58:34.351028 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:58:34.351084 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:58:34.351102 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:58:34.381572 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:58:34.381637 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:58:34.381661 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:58:34.381677 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:58:34.381705 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:58:34.381724 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:34Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:58:42.512675 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:42Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:58:42.512935 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:42Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:58:42.513064 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:42Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:58:42.513236 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:42Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:58:42.513283 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:42Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:58:42.513337 /usr/lib/systemd/system-generators/torcx-generator[1054]: time="2025-11-01T00:58:42Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:58:44.542332 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:58:44.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.547923 systemd[1]: Started systemd-journald.service. Nov 1 00:58:44.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.551002 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:58:44.551169 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:58:44.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.553501 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:58:44.553650 systemd[1]: Finished modprobe@drm.service. Nov 1 00:58:44.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.555987 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:58:44.556129 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:58:44.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.558492 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:58:44.558632 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:58:44.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.560780 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:58:44.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.560951 systemd[1]: Finished modprobe@loop.service. Nov 1 00:58:44.563143 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:58:44.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.565650 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:58:44.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.568271 systemd[1]: Reached target network-pre.target. Nov 1 00:58:44.571304 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:58:44.574807 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:58:44.576848 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:58:44.591850 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:58:44.595305 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:58:44.597942 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:58:44.598912 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:58:44.601219 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:58:44.602275 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:58:44.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.606823 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:58:44.611397 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:58:44.614850 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:58:44.618455 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:58:44.631963 systemd-journald[1147]: Time spent on flushing to /var/log/journal/e5b6791bbe0c4470bda8a0877f687825 is 29.587ms for 1161 entries. Nov 1 00:58:44.631963 systemd-journald[1147]: System Journal (/var/log/journal/e5b6791bbe0c4470bda8a0877f687825) is 8.0M, max 2.6G, 2.6G free. Nov 1 00:58:44.727196 systemd-journald[1147]: Received client request to flush runtime journal. Nov 1 00:58:44.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:44.645211 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:58:44.728273 udevadm[1177]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Nov 1 00:58:44.647902 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:58:44.676310 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:58:44.679853 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:58:44.720437 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:58:44.728116 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:58:44.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:45.228284 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:58:45.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:45.852074 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:58:45.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:45.854000 audit: BPF prog-id=24 op=LOAD Nov 1 00:58:45.854000 audit: BPF prog-id=25 op=LOAD Nov 1 00:58:45.854000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:58:45.854000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:58:45.856279 systemd[1]: Starting systemd-udevd.service... Nov 1 00:58:45.874033 systemd-udevd[1180]: Using default interface naming scheme 'v252'. Nov 1 00:58:46.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:46.284000 audit: BPF prog-id=26 op=LOAD Nov 1 00:58:46.281506 systemd[1]: Started systemd-udevd.service. Nov 1 00:58:46.286591 systemd[1]: Starting systemd-networkd.service... Nov 1 00:58:46.327218 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Nov 1 00:58:46.377000 audit: BPF prog-id=27 op=LOAD Nov 1 00:58:46.377000 audit: BPF prog-id=28 op=LOAD Nov 1 00:58:46.377000 audit: BPF prog-id=29 op=LOAD Nov 1 00:58:46.379344 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:58:46.437991 kernel: hv_vmbus: registering driver hyperv_fb Nov 1 00:58:46.444985 systemd[1]: Started systemd-userdbd.service. Nov 1 00:58:46.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:46.407000 audit[1194]: AVC avc: denied { confidentiality } for pid=1194 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:58:46.471815 kernel: mousedev: PS/2 mouse device common for all mice Nov 1 00:58:46.484816 kernel: hv_vmbus: registering driver hv_balloon Nov 1 00:58:46.506821 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Nov 1 00:58:46.506891 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Nov 1 00:58:46.506918 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Nov 1 00:58:46.523801 kernel: hv_utils: Registering HyperV Utility Driver Nov 1 00:58:46.523882 kernel: hv_vmbus: registering driver hv_utils Nov 1 00:58:46.524807 kernel: hv_utils: Heartbeat IC version 3.0 Nov 1 00:58:46.524883 kernel: hv_utils: Shutdown IC version 3.2 Nov 1 00:58:46.524912 kernel: hv_utils: TimeSync IC version 4.0 Nov 1 00:58:47.519270 kernel: Console: switching to colour dummy device 80x25 Nov 1 00:58:47.525262 kernel: Console: switching to colour frame buffer device 128x48 Nov 1 00:58:46.407000 audit[1194]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=555c68e934d0 a1=f83c a2=7f10eb41fbc5 a3=5 items=12 ppid=1180 pid=1194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:58:46.407000 audit: CWD cwd="/" Nov 1 00:58:46.407000 audit: PATH item=0 name=(null) inode=235 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=1 name=(null) inode=15682 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=2 name=(null) inode=15682 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=3 name=(null) inode=15683 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=4 name=(null) inode=15682 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=5 name=(null) inode=15684 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=6 name=(null) inode=15682 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=7 name=(null) inode=15685 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=8 name=(null) inode=15682 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=9 name=(null) inode=15686 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=10 name=(null) inode=15682 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PATH item=11 name=(null) inode=15687 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:58:46.407000 audit: PROCTITLE proctitle="(udev-worker)" Nov 1 00:58:47.702852 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:58:47.708448 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Nov 1 00:58:47.752773 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:58:47.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:47.756802 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:58:47.760997 systemd-networkd[1191]: lo: Link UP Nov 1 00:58:47.761008 systemd-networkd[1191]: lo: Gained carrier Nov 1 00:58:47.761587 systemd-networkd[1191]: Enumeration completed Nov 1 00:58:47.761707 systemd[1]: Started systemd-networkd.service. Nov 1 00:58:47.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:47.765074 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:58:47.815443 systemd-networkd[1191]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:58:47.868381 kernel: mlx5_core 15a4:00:02.0 enP5540s1: Link up Nov 1 00:58:47.868820 kernel: buffer_size[0]=0 is not enough for lossless buffer Nov 1 00:58:47.893353 kernel: hv_netvsc 6045bdd1-8ab7-6045-bdd1-8ab76045bdd1 eth0: Data path switched to VF: enP5540s1 Nov 1 00:58:47.894711 systemd-networkd[1191]: enP5540s1: Link UP Nov 1 00:58:47.894970 systemd-networkd[1191]: eth0: Link UP Nov 1 00:58:47.895086 systemd-networkd[1191]: eth0: Gained carrier Nov 1 00:58:47.899632 systemd-networkd[1191]: enP5540s1: Gained carrier Nov 1 00:58:47.934458 systemd-networkd[1191]: eth0: DHCPv4 address 10.200.4.8/24, gateway 10.200.4.1 acquired from 168.63.129.16 Nov 1 00:58:48.161945 lvm[1257]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:58:48.200657 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:58:48.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:48.203579 systemd[1]: Reached target cryptsetup.target. Nov 1 00:58:48.207406 systemd[1]: Starting lvm2-activation.service... Nov 1 00:58:48.213765 lvm[1259]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:58:48.240400 systemd[1]: Finished lvm2-activation.service. Nov 1 00:58:48.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:48.242647 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:58:48.244681 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:58:48.244713 systemd[1]: Reached target local-fs.target. Nov 1 00:58:48.246643 systemd[1]: Reached target machines.target. Nov 1 00:58:48.249763 systemd[1]: Starting ldconfig.service... Nov 1 00:58:48.252380 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:58:48.252484 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:58:48.253635 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:58:48.256759 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:58:48.260464 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:58:48.263663 systemd[1]: Starting systemd-sysext.service... Nov 1 00:58:48.494418 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1261 (bootctl) Nov 1 00:58:48.495978 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:58:48.831656 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:58:48.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:48.841108 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:58:48.873904 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:58:48.874127 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:58:48.902358 kernel: loop0: detected capacity change from 0 to 224512 Nov 1 00:58:48.937358 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:58:48.956431 kernel: loop1: detected capacity change from 0 to 224512 Nov 1 00:58:48.969895 (sd-sysext)[1273]: Using extensions 'kubernetes'. Nov 1 00:58:48.971538 (sd-sysext)[1273]: Merged extensions into '/usr'. Nov 1 00:58:48.990197 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:58:48.991753 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:58:48.994226 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:58:48.997857 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:58:49.001104 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:58:49.004430 systemd[1]: Starting modprobe@loop.service... Nov 1 00:58:49.006554 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:58:49.006745 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:58:49.006872 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:58:49.009617 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:58:49.012214 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:58:49.012390 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:58:49.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.015305 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:58:49.015482 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:58:49.018062 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:58:49.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.018199 systemd[1]: Finished modprobe@loop.service. Nov 1 00:58:49.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.018702 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:58:49.018803 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:58:49.020626 systemd[1]: Finished systemd-sysext.service. Nov 1 00:58:49.023975 systemd[1]: Starting ensure-sysext.service... Nov 1 00:58:49.029661 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:58:49.035545 systemd[1]: Reloading. Nov 1 00:58:49.093280 /usr/lib/systemd/system-generators/torcx-generator[1300]: time="2025-11-01T00:58:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:58:49.093321 /usr/lib/systemd/system-generators/torcx-generator[1300]: time="2025-11-01T00:58:49Z" level=info msg="torcx already run" Nov 1 00:58:49.200134 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:58:49.200156 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:58:49.201048 systemd-tmpfiles[1280]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:58:49.217138 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:58:49.284000 audit: BPF prog-id=30 op=LOAD Nov 1 00:58:49.284000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:58:49.285000 audit: BPF prog-id=31 op=LOAD Nov 1 00:58:49.285000 audit: BPF prog-id=32 op=LOAD Nov 1 00:58:49.285000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:58:49.285000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:58:49.286000 audit: BPF prog-id=33 op=LOAD Nov 1 00:58:49.286000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:58:49.286000 audit: BPF prog-id=34 op=LOAD Nov 1 00:58:49.286000 audit: BPF prog-id=35 op=LOAD Nov 1 00:58:49.287000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:58:49.287000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:58:49.288000 audit: BPF prog-id=36 op=LOAD Nov 1 00:58:49.288000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:58:49.288000 audit: BPF prog-id=37 op=LOAD Nov 1 00:58:49.289000 audit: BPF prog-id=38 op=LOAD Nov 1 00:58:49.289000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:58:49.289000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:58:49.294555 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:58:49.296443 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:58:49.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.308030 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:58:49.308305 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:58:49.309936 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:58:49.313355 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:58:49.315729 systemd[1]: Starting modprobe@loop.service... Nov 1 00:58:49.315879 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:58:49.316084 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:58:49.316290 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:58:49.317666 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:58:49.317879 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:58:49.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.318511 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:58:49.318627 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:58:49.324826 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:58:49.324974 systemd[1]: Finished modprobe@loop.service. Nov 1 00:58:49.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.326304 systemd[1]: Finished ensure-sysext.service. Nov 1 00:58:49.327604 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:58:49.327835 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:58:49.328871 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:58:49.330729 systemd[1]: Starting modprobe@drm.service... Nov 1 00:58:49.331895 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:58:49.333034 systemd-tmpfiles[1280]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:58:49.334489 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:58:49.334577 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:58:49.334707 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:58:49.335177 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:58:49.335315 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:58:49.335785 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:58:49.337689 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:58:49.337809 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:58:49.338081 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:58:49.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.334000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.341457 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:58:49.341601 systemd[1]: Finished modprobe@drm.service. Nov 1 00:58:49.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.395561 systemd-tmpfiles[1280]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:58:49.425390 systemd-fsck[1269]: fsck.fat 4.2 (2021-01-31) Nov 1 00:58:49.425390 systemd-fsck[1269]: /dev/sda1: 790 files, 120773/258078 clusters Nov 1 00:58:49.427635 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:58:49.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.432102 systemd[1]: Mounting boot.mount... Nov 1 00:58:49.472654 systemd[1]: Mounted boot.mount. Nov 1 00:58:49.489458 systemd-networkd[1191]: eth0: Gained IPv6LL Nov 1 00:58:49.492144 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:58:49.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:49.495426 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:58:49.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.236567 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:58:50.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.242283 kernel: kauditd_printk_skb: 122 callbacks suppressed Nov 1 00:58:50.242374 kernel: audit: type=1130 audit(1761958730.238:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.241646 systemd[1]: Starting audit-rules.service... Nov 1 00:58:50.256103 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:58:50.260155 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:58:50.267379 kernel: audit: type=1334 audit(1761958730.262:207): prog-id=39 op=LOAD Nov 1 00:58:50.262000 audit: BPF prog-id=39 op=LOAD Nov 1 00:58:50.264856 systemd[1]: Starting systemd-resolved.service... Nov 1 00:58:50.268000 audit: BPF prog-id=40 op=LOAD Nov 1 00:58:50.270985 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:58:50.273353 kernel: audit: type=1334 audit(1761958730.268:208): prog-id=40 op=LOAD Nov 1 00:58:50.276230 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:58:50.317068 kernel: audit: type=1127 audit(1761958730.299:209): pid=1379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.299000 audit[1379]: SYSTEM_BOOT pid=1379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.318658 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:58:50.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.359205 kernel: audit: type=1130 audit(1761958730.344:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.359269 kernel: audit: type=1130 audit(1761958730.357:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.356440 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:58:50.358655 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:58:50.391070 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:58:50.405959 kernel: audit: type=1130 audit(1761958730.392:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.393560 systemd[1]: Reached target time-set.target. Nov 1 00:58:50.448977 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:58:50.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.458207 systemd-resolved[1377]: Positive Trust Anchors: Nov 1 00:58:50.458488 systemd-resolved[1377]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:58:50.458581 systemd-resolved[1377]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:58:50.467359 kernel: audit: type=1130 audit(1761958730.452:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.507989 systemd-timesyncd[1378]: Contacted time server 139.143.5.30:123 (0.flatcar.pool.ntp.org). Nov 1 00:58:50.508386 systemd-timesyncd[1378]: Initial clock synchronization to Sat 2025-11-01 00:58:50.508928 UTC. Nov 1 00:58:50.560878 systemd-resolved[1377]: Using system hostname 'ci-3510.3.8-n-9d78d981c4'. Nov 1 00:58:50.562514 systemd[1]: Started systemd-resolved.service. Nov 1 00:58:50.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.564941 systemd[1]: Reached target network.target. Nov 1 00:58:50.581703 kernel: audit: type=1130 audit(1761958730.563:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:58:50.581597 systemd[1]: Reached target network-online.target. Nov 1 00:58:50.583291 augenrules[1394]: No rules Nov 1 00:58:50.583833 systemd[1]: Reached target nss-lookup.target. Nov 1 00:58:50.580000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:58:50.580000 audit[1394]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc97909370 a2=420 a3=0 items=0 ppid=1373 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:58:50.580000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:58:50.592846 systemd[1]: Finished audit-rules.service. Nov 1 00:58:50.593348 kernel: audit: type=1305 audit(1761958730.580:215): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:58:56.265319 ldconfig[1260]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:58:56.276204 systemd[1]: Finished ldconfig.service. Nov 1 00:58:56.279778 systemd[1]: Starting systemd-update-done.service... Nov 1 00:58:56.288573 systemd[1]: Finished systemd-update-done.service. Nov 1 00:58:56.291132 systemd[1]: Reached target sysinit.target. Nov 1 00:58:56.293452 systemd[1]: Started motdgen.path. Nov 1 00:58:56.295393 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:58:56.298453 systemd[1]: Started logrotate.timer. Nov 1 00:58:56.300271 systemd[1]: Started mdadm.timer. Nov 1 00:58:56.302007 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:58:56.304074 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:58:56.304108 systemd[1]: Reached target paths.target. Nov 1 00:58:56.305892 systemd[1]: Reached target timers.target. Nov 1 00:58:56.308020 systemd[1]: Listening on dbus.socket. Nov 1 00:58:56.310941 systemd[1]: Starting docker.socket... Nov 1 00:58:56.315455 systemd[1]: Listening on sshd.socket. Nov 1 00:58:56.317544 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:58:56.318013 systemd[1]: Listening on docker.socket. Nov 1 00:58:56.319917 systemd[1]: Reached target sockets.target. Nov 1 00:58:56.321943 systemd[1]: Reached target basic.target. Nov 1 00:58:56.323872 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:58:56.323900 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:58:56.324966 systemd[1]: Starting containerd.service... Nov 1 00:58:56.328301 systemd[1]: Starting dbus.service... Nov 1 00:58:56.331530 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:58:56.334794 systemd[1]: Starting extend-filesystems.service... Nov 1 00:58:56.336615 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:58:56.352763 systemd[1]: Starting kubelet.service... Nov 1 00:58:56.355715 systemd[1]: Starting motdgen.service... Nov 1 00:58:56.358687 systemd[1]: Started nvidia.service. Nov 1 00:58:56.363060 systemd[1]: Starting prepare-helm.service... Nov 1 00:58:56.366392 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:58:56.369932 systemd[1]: Starting sshd-keygen.service... Nov 1 00:58:56.375073 systemd[1]: Starting systemd-logind.service... Nov 1 00:58:56.377216 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:58:56.377303 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:58:56.377889 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:58:56.378805 systemd[1]: Starting update-engine.service... Nov 1 00:58:56.382612 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:58:56.408655 jq[1404]: false Nov 1 00:58:56.408897 jq[1418]: true Nov 1 00:58:56.409017 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:58:56.409266 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:58:56.417845 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:58:56.418075 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:58:56.435749 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:58:56.435939 systemd[1]: Finished motdgen.service. Nov 1 00:58:56.442471 jq[1424]: true Nov 1 00:58:56.460564 extend-filesystems[1405]: Found loop1 Nov 1 00:58:56.460564 extend-filesystems[1405]: Found sda Nov 1 00:58:56.460564 extend-filesystems[1405]: Found sda1 Nov 1 00:58:56.460564 extend-filesystems[1405]: Found sda2 Nov 1 00:58:56.460564 extend-filesystems[1405]: Found sda3 Nov 1 00:58:56.460564 extend-filesystems[1405]: Found usr Nov 1 00:58:56.460564 extend-filesystems[1405]: Found sda4 Nov 1 00:58:56.460564 extend-filesystems[1405]: Found sda6 Nov 1 00:58:56.460564 extend-filesystems[1405]: Found sda7 Nov 1 00:58:56.460564 extend-filesystems[1405]: Found sda9 Nov 1 00:58:56.460564 extend-filesystems[1405]: Checking size of /dev/sda9 Nov 1 00:58:56.497861 env[1425]: time="2025-11-01T00:58:56.497813433Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:58:56.525422 tar[1421]: linux-amd64/LICENSE Nov 1 00:58:56.525422 tar[1421]: linux-amd64/helm Nov 1 00:58:56.543489 extend-filesystems[1405]: Old size kept for /dev/sda9 Nov 1 00:58:56.545862 extend-filesystems[1405]: Found sr0 Nov 1 00:58:56.549663 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.545508276Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.548073997Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.555683655Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.555722957Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.556012670Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.556037771Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.556056672Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.556071073Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.556170578Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:58:56.564266 env[1425]: time="2025-11-01T00:58:56.556446691Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:58:56.549873 systemd[1]: Finished extend-filesystems.service. Nov 1 00:58:56.564740 env[1425]: time="2025-11-01T00:58:56.556634699Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:58:56.564740 env[1425]: time="2025-11-01T00:58:56.556656500Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:58:56.564740 env[1425]: time="2025-11-01T00:58:56.556722604Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:58:56.564740 env[1425]: time="2025-11-01T00:58:56.556737104Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:58:56.589102 env[1425]: time="2025-11-01T00:58:56.589057425Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:58:56.589229 env[1425]: time="2025-11-01T00:58:56.589109027Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:58:56.589229 env[1425]: time="2025-11-01T00:58:56.589129628Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:58:56.589229 env[1425]: time="2025-11-01T00:58:56.589168930Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.589229 env[1425]: time="2025-11-01T00:58:56.589186831Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.589229 env[1425]: time="2025-11-01T00:58:56.589204931Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.589229 env[1425]: time="2025-11-01T00:58:56.589222732Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.589472 env[1425]: time="2025-11-01T00:58:56.589240133Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.589472 env[1425]: time="2025-11-01T00:58:56.589258434Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.589472 env[1425]: time="2025-11-01T00:58:56.589276435Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.589472 env[1425]: time="2025-11-01T00:58:56.589294436Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.589472 env[1425]: time="2025-11-01T00:58:56.589313037Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:58:56.589706 env[1425]: time="2025-11-01T00:58:56.589543147Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:58:56.589706 env[1425]: time="2025-11-01T00:58:56.589652253Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.589991168Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590027170Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590063972Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590120975Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590138275Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590156476Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590172477Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590190278Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590208079Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590224179Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590239680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590258281Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590419289Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590438990Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.596212 env[1425]: time="2025-11-01T00:58:56.590455990Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.594976 systemd-logind[1416]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 1 00:58:56.600024 env[1425]: time="2025-11-01T00:58:56.590472291Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:58:56.600024 env[1425]: time="2025-11-01T00:58:56.590493492Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:58:56.600024 env[1425]: time="2025-11-01T00:58:56.590509393Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:58:56.600024 env[1425]: time="2025-11-01T00:58:56.590535394Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:58:56.600024 env[1425]: time="2025-11-01T00:58:56.590574996Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:58:56.595649 systemd[1]: Started containerd.service. Nov 1 00:58:56.600304 env[1425]: time="2025-11-01T00:58:56.590845709Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:58:56.600304 env[1425]: time="2025-11-01T00:58:56.590941513Z" level=info msg="Connect containerd service" Nov 1 00:58:56.600304 env[1425]: time="2025-11-01T00:58:56.590990015Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:58:56.600304 env[1425]: time="2025-11-01T00:58:56.595098009Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:58:56.600304 env[1425]: time="2025-11-01T00:58:56.595438525Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:58:56.600304 env[1425]: time="2025-11-01T00:58:56.595507628Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:58:56.600304 env[1425]: time="2025-11-01T00:58:56.595689737Z" level=info msg="containerd successfully booted in 0.098547s" Nov 1 00:58:56.630806 env[1425]: time="2025-11-01T00:58:56.606397140Z" level=info msg="Start subscribing containerd event" Nov 1 00:58:56.630806 env[1425]: time="2025-11-01T00:58:56.606446042Z" level=info msg="Start recovering state" Nov 1 00:58:56.630806 env[1425]: time="2025-11-01T00:58:56.606528246Z" level=info msg="Start event monitor" Nov 1 00:58:56.630806 env[1425]: time="2025-11-01T00:58:56.606547347Z" level=info msg="Start snapshots syncer" Nov 1 00:58:56.630806 env[1425]: time="2025-11-01T00:58:56.606561148Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:58:56.630806 env[1425]: time="2025-11-01T00:58:56.606571548Z" level=info msg="Start streaming server" Nov 1 00:58:56.601526 systemd-logind[1416]: New seat seat0. Nov 1 00:58:56.680183 dbus-daemon[1403]: [system] SELinux support is enabled Nov 1 00:58:56.680410 systemd[1]: Started dbus.service. Nov 1 00:58:56.683377 bash[1456]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:58:56.685201 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:58:56.685239 systemd[1]: Reached target system-config.target. Nov 1 00:58:56.687868 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:58:56.687891 systemd[1]: Reached target user-config.target. Nov 1 00:58:56.690393 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:58:56.695684 systemd[1]: Started systemd-logind.service. Nov 1 00:58:56.697788 dbus-daemon[1403]: [system] Successfully activated service 'org.freedesktop.systemd1' Nov 1 00:58:56.763787 systemd[1]: nvidia.service: Deactivated successfully. Nov 1 00:58:57.258939 tar[1421]: linux-amd64/README.md Nov 1 00:58:57.266169 systemd[1]: Finished prepare-helm.service. Nov 1 00:58:57.294093 update_engine[1417]: I1101 00:58:57.293285 1417 main.cc:92] Flatcar Update Engine starting Nov 1 00:58:57.339489 systemd[1]: Started update-engine.service. Nov 1 00:58:57.347686 update_engine[1417]: I1101 00:58:57.339519 1417 update_check_scheduler.cc:74] Next update check in 6m27s Nov 1 00:58:57.344661 systemd[1]: Started locksmithd.service. Nov 1 00:58:57.729637 sshd_keygen[1435]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:58:57.759746 systemd[1]: Finished sshd-keygen.service. Nov 1 00:58:57.764142 systemd[1]: Starting issuegen.service... Nov 1 00:58:57.767569 systemd[1]: Started waagent.service. Nov 1 00:58:57.776260 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:58:57.776455 systemd[1]: Finished issuegen.service. Nov 1 00:58:57.780532 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:58:57.804316 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:58:57.808930 systemd[1]: Started getty@tty1.service. Nov 1 00:58:57.820491 systemd[1]: Started serial-getty@ttyS0.service. Nov 1 00:58:57.822989 systemd[1]: Reached target getty.target. Nov 1 00:58:58.092672 systemd[1]: Started kubelet.service. Nov 1 00:58:58.095359 systemd[1]: Reached target multi-user.target. Nov 1 00:58:58.098958 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:58:58.112647 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:58:58.112831 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:58:58.115422 systemd[1]: Startup finished in 966ms (firmware) + 15.824s (loader) + 922ms (kernel) + 14.084s (initrd) + 25.338s (userspace) = 57.136s. Nov 1 00:58:58.513020 login[1520]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Nov 1 00:58:58.515351 login[1522]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Nov 1 00:58:58.539764 systemd[1]: Created slice user-500.slice. Nov 1 00:58:58.542452 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:58:58.545989 systemd-logind[1416]: New session 2 of user core. Nov 1 00:58:58.553402 systemd-logind[1416]: New session 1 of user core. Nov 1 00:58:58.558489 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:58:58.560226 systemd[1]: Starting user@500.service... Nov 1 00:58:58.619205 (systemd)[1535]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:58:58.755311 kubelet[1528]: E1101 00:58:58.755264 1528 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:58:58.757098 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:58:58.757261 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:58:58.757657 systemd[1]: kubelet.service: Consumed 1.058s CPU time. Nov 1 00:58:58.837762 systemd[1535]: Queued start job for default target default.target. Nov 1 00:58:58.838580 systemd[1535]: Reached target paths.target. Nov 1 00:58:58.838614 systemd[1535]: Reached target sockets.target. Nov 1 00:58:58.838630 systemd[1535]: Reached target timers.target. Nov 1 00:58:58.838645 systemd[1535]: Reached target basic.target. Nov 1 00:58:58.838698 systemd[1535]: Reached target default.target. Nov 1 00:58:58.838733 systemd[1535]: Startup finished in 209ms. Nov 1 00:58:58.838786 systemd[1]: Started user@500.service. Nov 1 00:58:58.840128 systemd[1]: Started session-1.scope. Nov 1 00:58:58.840952 systemd[1]: Started session-2.scope. Nov 1 00:58:58.842431 locksmithd[1506]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:59:03.212157 waagent[1515]: 2025-11-01T00:59:03.212049Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Nov 1 00:59:03.216710 waagent[1515]: 2025-11-01T00:59:03.216633Z INFO Daemon Daemon OS: flatcar 3510.3.8 Nov 1 00:59:03.218999 waagent[1515]: 2025-11-01T00:59:03.218929Z INFO Daemon Daemon Python: 3.9.16 Nov 1 00:59:03.221452 waagent[1515]: 2025-11-01T00:59:03.221379Z INFO Daemon Daemon Run daemon Nov 1 00:59:03.224020 waagent[1515]: 2025-11-01T00:59:03.223957Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Nov 1 00:59:03.269207 waagent[1515]: 2025-11-01T00:59:03.269051Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Nov 1 00:59:03.279120 waagent[1515]: 2025-11-01T00:59:03.279001Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Nov 1 00:59:03.283959 waagent[1515]: 2025-11-01T00:59:03.283893Z INFO Daemon Daemon cloud-init is enabled: False Nov 1 00:59:03.286654 waagent[1515]: 2025-11-01T00:59:03.286590Z INFO Daemon Daemon Using waagent for provisioning Nov 1 00:59:03.289831 waagent[1515]: 2025-11-01T00:59:03.289773Z INFO Daemon Daemon Activate resource disk Nov 1 00:59:03.292101 waagent[1515]: 2025-11-01T00:59:03.292041Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Nov 1 00:59:03.303728 waagent[1515]: 2025-11-01T00:59:03.303655Z INFO Daemon Daemon Found device: None Nov 1 00:59:03.306624 waagent[1515]: 2025-11-01T00:59:03.306557Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Nov 1 00:59:03.311358 waagent[1515]: 2025-11-01T00:59:03.311291Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Nov 1 00:59:03.319908 waagent[1515]: 2025-11-01T00:59:03.319841Z INFO Daemon Daemon Clean protocol and wireserver endpoint Nov 1 00:59:03.325049 waagent[1515]: 2025-11-01T00:59:03.320229Z INFO Daemon Daemon Running default provisioning handler Nov 1 00:59:03.329666 waagent[1515]: 2025-11-01T00:59:03.329534Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Nov 1 00:59:03.336280 waagent[1515]: 2025-11-01T00:59:03.336174Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Nov 1 00:59:03.344549 waagent[1515]: 2025-11-01T00:59:03.336597Z INFO Daemon Daemon cloud-init is enabled: False Nov 1 00:59:03.344549 waagent[1515]: 2025-11-01T00:59:03.337480Z INFO Daemon Daemon Copying ovf-env.xml Nov 1 00:59:03.398845 waagent[1515]: 2025-11-01T00:59:03.398716Z INFO Daemon Daemon Successfully mounted dvd Nov 1 00:59:03.460205 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Nov 1 00:59:03.493279 waagent[1515]: 2025-11-01T00:59:03.493044Z INFO Daemon Daemon Detect protocol endpoint Nov 1 00:59:03.496240 waagent[1515]: 2025-11-01T00:59:03.496148Z INFO Daemon Daemon Clean protocol and wireserver endpoint Nov 1 00:59:03.499519 waagent[1515]: 2025-11-01T00:59:03.499443Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Nov 1 00:59:03.502973 waagent[1515]: 2025-11-01T00:59:03.502911Z INFO Daemon Daemon Test for route to 168.63.129.16 Nov 1 00:59:03.505939 waagent[1515]: 2025-11-01T00:59:03.505877Z INFO Daemon Daemon Route to 168.63.129.16 exists Nov 1 00:59:03.508555 waagent[1515]: 2025-11-01T00:59:03.508495Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Nov 1 00:59:03.658427 waagent[1515]: 2025-11-01T00:59:03.658347Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Nov 1 00:59:03.662881 waagent[1515]: 2025-11-01T00:59:03.662832Z INFO Daemon Daemon Wire protocol version:2012-11-30 Nov 1 00:59:03.665604 waagent[1515]: 2025-11-01T00:59:03.665549Z INFO Daemon Daemon Server preferred version:2015-04-05 Nov 1 00:59:04.138633 waagent[1515]: 2025-11-01T00:59:04.138488Z INFO Daemon Daemon Initializing goal state during protocol detection Nov 1 00:59:04.147926 waagent[1515]: 2025-11-01T00:59:04.147849Z INFO Daemon Daemon Forcing an update of the goal state.. Nov 1 00:59:04.152992 waagent[1515]: 2025-11-01T00:59:04.148164Z INFO Daemon Daemon Fetching goal state [incarnation 1] Nov 1 00:59:04.282498 waagent[1515]: 2025-11-01T00:59:04.282371Z INFO Daemon Daemon Found private key matching thumbprint 65F8359436C1C78F3CEA48C86A1E4E89489ED512 Nov 1 00:59:04.286737 waagent[1515]: 2025-11-01T00:59:04.286661Z INFO Daemon Daemon Fetch goal state completed Nov 1 00:59:04.335869 waagent[1515]: 2025-11-01T00:59:04.335778Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 4235d8c9-38f7-4516-b48c-69d13f223c1c New eTag: 16274354303016315644] Nov 1 00:59:04.341689 waagent[1515]: 2025-11-01T00:59:04.341604Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Nov 1 00:59:04.354187 waagent[1515]: 2025-11-01T00:59:04.354118Z INFO Daemon Daemon Starting provisioning Nov 1 00:59:04.356870 waagent[1515]: 2025-11-01T00:59:04.356802Z INFO Daemon Daemon Handle ovf-env.xml. Nov 1 00:59:04.359265 waagent[1515]: 2025-11-01T00:59:04.359200Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-9d78d981c4] Nov 1 00:59:04.378315 waagent[1515]: 2025-11-01T00:59:04.378184Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-9d78d981c4] Nov 1 00:59:04.381828 waagent[1515]: 2025-11-01T00:59:04.381743Z INFO Daemon Daemon Examine /proc/net/route for primary interface Nov 1 00:59:04.385507 waagent[1515]: 2025-11-01T00:59:04.385441Z INFO Daemon Daemon Primary interface is [eth0] Nov 1 00:59:04.400048 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Nov 1 00:59:04.400298 systemd[1]: Stopped systemd-networkd-wait-online.service. Nov 1 00:59:04.400395 systemd[1]: Stopping systemd-networkd-wait-online.service... Nov 1 00:59:04.400785 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:59:04.405383 systemd-networkd[1191]: eth0: DHCPv6 lease lost Nov 1 00:59:04.406770 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:59:04.407011 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:59:04.409702 systemd[1]: Starting systemd-networkd.service... Nov 1 00:59:04.441796 systemd-networkd[1577]: enP5540s1: Link UP Nov 1 00:59:04.441807 systemd-networkd[1577]: enP5540s1: Gained carrier Nov 1 00:59:04.443198 systemd-networkd[1577]: eth0: Link UP Nov 1 00:59:04.443208 systemd-networkd[1577]: eth0: Gained carrier Nov 1 00:59:04.443678 systemd-networkd[1577]: lo: Link UP Nov 1 00:59:04.443687 systemd-networkd[1577]: lo: Gained carrier Nov 1 00:59:04.444007 systemd-networkd[1577]: eth0: Gained IPv6LL Nov 1 00:59:04.444300 systemd-networkd[1577]: Enumeration completed Nov 1 00:59:04.444429 systemd[1]: Started systemd-networkd.service. Nov 1 00:59:04.447108 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:59:04.447790 systemd-networkd[1577]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:59:04.451956 waagent[1515]: 2025-11-01T00:59:04.451756Z INFO Daemon Daemon Create user account if not exists Nov 1 00:59:04.454049 waagent[1515]: 2025-11-01T00:59:04.452661Z INFO Daemon Daemon User core already exists, skip useradd Nov 1 00:59:04.454579 waagent[1515]: 2025-11-01T00:59:04.454514Z INFO Daemon Daemon Configure sudoer Nov 1 00:59:04.463467 waagent[1515]: 2025-11-01T00:59:04.462710Z INFO Daemon Daemon Configure sshd Nov 1 00:59:04.463467 waagent[1515]: 2025-11-01T00:59:04.462980Z INFO Daemon Daemon Deploy ssh public key. Nov 1 00:59:04.483409 systemd-networkd[1577]: eth0: DHCPv4 address 10.200.4.8/24, gateway 10.200.4.1 acquired from 168.63.129.16 Nov 1 00:59:04.488379 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:59:05.583408 waagent[1515]: 2025-11-01T00:59:05.583290Z INFO Daemon Daemon Provisioning complete Nov 1 00:59:05.598691 waagent[1515]: 2025-11-01T00:59:05.598618Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Nov 1 00:59:05.602498 waagent[1515]: 2025-11-01T00:59:05.602432Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Nov 1 00:59:05.608151 waagent[1515]: 2025-11-01T00:59:05.608084Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Nov 1 00:59:05.874140 waagent[1583]: 2025-11-01T00:59:05.873973Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Nov 1 00:59:05.874890 waagent[1583]: 2025-11-01T00:59:05.874823Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:59:05.875037 waagent[1583]: 2025-11-01T00:59:05.874981Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:59:05.886224 waagent[1583]: 2025-11-01T00:59:05.886150Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Nov 1 00:59:05.886393 waagent[1583]: 2025-11-01T00:59:05.886326Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Nov 1 00:59:05.938716 waagent[1583]: 2025-11-01T00:59:05.938592Z INFO ExtHandler ExtHandler Found private key matching thumbprint 65F8359436C1C78F3CEA48C86A1E4E89489ED512 Nov 1 00:59:05.939015 waagent[1583]: 2025-11-01T00:59:05.938954Z INFO ExtHandler ExtHandler Fetch goal state completed Nov 1 00:59:05.952961 waagent[1583]: 2025-11-01T00:59:05.952897Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: d24d7d22-c75b-49d3-816c-a6600b7dfc22 New eTag: 16274354303016315644] Nov 1 00:59:05.953495 waagent[1583]: 2025-11-01T00:59:05.953437Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Nov 1 00:59:06.020363 waagent[1583]: 2025-11-01T00:59:06.020202Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Nov 1 00:59:06.030825 waagent[1583]: 2025-11-01T00:59:06.030737Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1583 Nov 1 00:59:06.034196 waagent[1583]: 2025-11-01T00:59:06.034125Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Nov 1 00:59:06.035349 waagent[1583]: 2025-11-01T00:59:06.035283Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Nov 1 00:59:06.110590 waagent[1583]: 2025-11-01T00:59:06.110527Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Nov 1 00:59:06.110983 waagent[1583]: 2025-11-01T00:59:06.110922Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Nov 1 00:59:06.118892 waagent[1583]: 2025-11-01T00:59:06.118836Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Nov 1 00:59:06.119382 waagent[1583]: 2025-11-01T00:59:06.119306Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Nov 1 00:59:06.120440 waagent[1583]: 2025-11-01T00:59:06.120380Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Nov 1 00:59:06.121689 waagent[1583]: 2025-11-01T00:59:06.121631Z INFO ExtHandler ExtHandler Starting env monitor service. Nov 1 00:59:06.122077 waagent[1583]: 2025-11-01T00:59:06.122021Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:59:06.122228 waagent[1583]: 2025-11-01T00:59:06.122179Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:59:06.122790 waagent[1583]: 2025-11-01T00:59:06.122732Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Nov 1 00:59:06.123196 waagent[1583]: 2025-11-01T00:59:06.123142Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Nov 1 00:59:06.123721 waagent[1583]: 2025-11-01T00:59:06.123670Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:59:06.123936 waagent[1583]: 2025-11-01T00:59:06.123878Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Nov 1 00:59:06.123936 waagent[1583]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Nov 1 00:59:06.123936 waagent[1583]: eth0 00000000 0104C80A 0003 0 0 1024 00000000 0 0 0 Nov 1 00:59:06.123936 waagent[1583]: eth0 0004C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Nov 1 00:59:06.123936 waagent[1583]: eth0 0104C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:59:06.123936 waagent[1583]: eth0 10813FA8 0104C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:59:06.123936 waagent[1583]: eth0 FEA9FEA9 0104C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:59:06.124593 waagent[1583]: 2025-11-01T00:59:06.124503Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Nov 1 00:59:06.124936 waagent[1583]: 2025-11-01T00:59:06.124882Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Nov 1 00:59:06.125088 waagent[1583]: 2025-11-01T00:59:06.125040Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:59:06.128665 waagent[1583]: 2025-11-01T00:59:06.128448Z INFO EnvHandler ExtHandler Configure routes Nov 1 00:59:06.130094 waagent[1583]: 2025-11-01T00:59:06.130028Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Nov 1 00:59:06.130362 waagent[1583]: 2025-11-01T00:59:06.130296Z INFO EnvHandler ExtHandler Gateway:None Nov 1 00:59:06.130491 waagent[1583]: 2025-11-01T00:59:06.130422Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Nov 1 00:59:06.130993 waagent[1583]: 2025-11-01T00:59:06.130939Z INFO EnvHandler ExtHandler Routes:None Nov 1 00:59:06.133792 waagent[1583]: 2025-11-01T00:59:06.133743Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Nov 1 00:59:06.142201 waagent[1583]: 2025-11-01T00:59:06.142149Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Nov 1 00:59:06.143497 waagent[1583]: 2025-11-01T00:59:06.143449Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Nov 1 00:59:06.145890 waagent[1583]: 2025-11-01T00:59:06.145840Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Nov 1 00:59:06.183969 waagent[1583]: 2025-11-01T00:59:06.183796Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1577' Nov 1 00:59:06.196765 waagent[1583]: 2025-11-01T00:59:06.196701Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Nov 1 00:59:06.286055 waagent[1583]: 2025-11-01T00:59:06.285920Z INFO MonitorHandler ExtHandler Network interfaces: Nov 1 00:59:06.286055 waagent[1583]: Executing ['ip', '-a', '-o', 'link']: Nov 1 00:59:06.286055 waagent[1583]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Nov 1 00:59:06.286055 waagent[1583]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 60:45:bd:d1:8a:b7 brd ff:ff:ff:ff:ff:ff Nov 1 00:59:06.286055 waagent[1583]: 3: enP5540s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 60:45:bd:d1:8a:b7 brd ff:ff:ff:ff:ff:ff\ altname enP5540p0s2 Nov 1 00:59:06.286055 waagent[1583]: Executing ['ip', '-4', '-a', '-o', 'address']: Nov 1 00:59:06.286055 waagent[1583]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Nov 1 00:59:06.286055 waagent[1583]: 2: eth0 inet 10.200.4.8/24 metric 1024 brd 10.200.4.255 scope global eth0\ valid_lft forever preferred_lft forever Nov 1 00:59:06.286055 waagent[1583]: Executing ['ip', '-6', '-a', '-o', 'address']: Nov 1 00:59:06.286055 waagent[1583]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Nov 1 00:59:06.286055 waagent[1583]: 2: eth0 inet6 fe80::6245:bdff:fed1:8ab7/64 scope link \ valid_lft forever preferred_lft forever Nov 1 00:59:06.546965 waagent[1583]: 2025-11-01T00:59:06.546897Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.15.0.1 -- exiting Nov 1 00:59:06.611587 waagent[1515]: 2025-11-01T00:59:06.611448Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Nov 1 00:59:06.618876 waagent[1515]: 2025-11-01T00:59:06.618796Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.15.0.1 to be the latest agent Nov 1 00:59:07.704897 waagent[1620]: 2025-11-01T00:59:07.704789Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.15.0.1) Nov 1 00:59:07.705647 waagent[1620]: 2025-11-01T00:59:07.705575Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Nov 1 00:59:07.705819 waagent[1620]: 2025-11-01T00:59:07.705761Z INFO ExtHandler ExtHandler Python: 3.9.16 Nov 1 00:59:07.705986 waagent[1620]: 2025-11-01T00:59:07.705937Z INFO ExtHandler ExtHandler CPU Arch: x86_64 Nov 1 00:59:07.721448 waagent[1620]: 2025-11-01T00:59:07.721321Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: x86_64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Nov 1 00:59:07.721884 waagent[1620]: 2025-11-01T00:59:07.721821Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:59:07.722065 waagent[1620]: 2025-11-01T00:59:07.722013Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:59:07.722307 waagent[1620]: 2025-11-01T00:59:07.722255Z INFO ExtHandler ExtHandler Initializing the goal state... Nov 1 00:59:07.734388 waagent[1620]: 2025-11-01T00:59:07.734305Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Nov 1 00:59:07.742766 waagent[1620]: 2025-11-01T00:59:07.742707Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.179 Nov 1 00:59:07.743707 waagent[1620]: 2025-11-01T00:59:07.743647Z INFO ExtHandler Nov 1 00:59:07.743873 waagent[1620]: 2025-11-01T00:59:07.743823Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 1e2d4f94-36c5-49fe-8e94-30e6ad34ed7c eTag: 16274354303016315644 source: Fabric] Nov 1 00:59:07.744613 waagent[1620]: 2025-11-01T00:59:07.744556Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Nov 1 00:59:07.745729 waagent[1620]: 2025-11-01T00:59:07.745668Z INFO ExtHandler Nov 1 00:59:07.745881 waagent[1620]: 2025-11-01T00:59:07.745831Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Nov 1 00:59:07.754052 waagent[1620]: 2025-11-01T00:59:07.753993Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Nov 1 00:59:07.754524 waagent[1620]: 2025-11-01T00:59:07.754473Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Nov 1 00:59:07.775169 waagent[1620]: 2025-11-01T00:59:07.775089Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Nov 1 00:59:07.831041 waagent[1620]: 2025-11-01T00:59:07.830915Z INFO ExtHandler Downloaded certificate {'thumbprint': '65F8359436C1C78F3CEA48C86A1E4E89489ED512', 'hasPrivateKey': True} Nov 1 00:59:07.832284 waagent[1620]: 2025-11-01T00:59:07.832211Z INFO ExtHandler Fetch goal state from WireServer completed Nov 1 00:59:07.833144 waagent[1620]: 2025-11-01T00:59:07.833082Z INFO ExtHandler ExtHandler Goal state initialization completed. Nov 1 00:59:07.851347 waagent[1620]: 2025-11-01T00:59:07.851235Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Nov 1 00:59:07.859251 waagent[1620]: 2025-11-01T00:59:07.859158Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Nov 1 00:59:07.862865 waagent[1620]: 2025-11-01T00:59:07.862771Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Nov 1 00:59:07.863086 waagent[1620]: 2025-11-01T00:59:07.863032Z INFO ExtHandler ExtHandler Checking state of the firewall Nov 1 00:59:08.192452 waagent[1620]: 2025-11-01T00:59:08.192304Z WARNING ExtHandler ExtHandler The firewall rules for Azure Fabric are not setup correctly (the environment thread will fix it): The following rules are missing: ['ACCEPT DNS'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n']. Current state: Nov 1 00:59:08.192452 waagent[1620]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.192452 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.192452 waagent[1620]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.192452 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.192452 waagent[1620]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.192452 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.192452 waagent[1620]: 55 7857 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:59:08.192452 waagent[1620]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:59:08.193623 waagent[1620]: 2025-11-01T00:59:08.193554Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Nov 1 00:59:08.196301 waagent[1620]: 2025-11-01T00:59:08.196200Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Nov 1 00:59:08.196743 waagent[1620]: 2025-11-01T00:59:08.196685Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up /lib/systemd/system/waagent-network-setup.service Nov 1 00:59:08.261772 waagent[1620]: 2025-11-01T00:59:08.261632Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Nov 1 00:59:08.271833 waagent[1620]: 2025-11-01T00:59:08.271769Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Nov 1 00:59:08.272379 waagent[1620]: 2025-11-01T00:59:08.272304Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Nov 1 00:59:08.279807 waagent[1620]: 2025-11-01T00:59:08.279740Z INFO ExtHandler ExtHandler WALinuxAgent-2.15.0.1 running as process 1620 Nov 1 00:59:08.282870 waagent[1620]: 2025-11-01T00:59:08.282808Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Nov 1 00:59:08.283648 waagent[1620]: 2025-11-01T00:59:08.283588Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Nov 1 00:59:08.284507 waagent[1620]: 2025-11-01T00:59:08.284450Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Nov 1 00:59:08.287035 waagent[1620]: 2025-11-01T00:59:08.286974Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Nov 1 00:59:08.287373 waagent[1620]: 2025-11-01T00:59:08.287304Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Nov 1 00:59:08.288962 waagent[1620]: 2025-11-01T00:59:08.288904Z INFO ExtHandler ExtHandler Starting env monitor service. Nov 1 00:59:08.289397 waagent[1620]: 2025-11-01T00:59:08.289319Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:59:08.289771 waagent[1620]: 2025-11-01T00:59:08.289716Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Nov 1 00:59:08.290022 waagent[1620]: 2025-11-01T00:59:08.289971Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:59:08.291115 waagent[1620]: 2025-11-01T00:59:08.291058Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Nov 1 00:59:08.291355 waagent[1620]: 2025-11-01T00:59:08.291290Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Nov 1 00:59:08.291590 waagent[1620]: 2025-11-01T00:59:08.291541Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:59:08.291692 waagent[1620]: 2025-11-01T00:59:08.291632Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Nov 1 00:59:08.292422 waagent[1620]: 2025-11-01T00:59:08.292367Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Nov 1 00:59:08.292677 waagent[1620]: 2025-11-01T00:59:08.292626Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Nov 1 00:59:08.292983 waagent[1620]: 2025-11-01T00:59:08.292930Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Nov 1 00:59:08.292983 waagent[1620]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Nov 1 00:59:08.292983 waagent[1620]: eth0 00000000 0104C80A 0003 0 0 1024 00000000 0 0 0 Nov 1 00:59:08.292983 waagent[1620]: eth0 0004C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Nov 1 00:59:08.292983 waagent[1620]: eth0 0104C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:59:08.292983 waagent[1620]: eth0 10813FA8 0104C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:59:08.292983 waagent[1620]: eth0 FEA9FEA9 0104C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:59:08.296417 waagent[1620]: 2025-11-01T00:59:08.296291Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:59:08.300718 waagent[1620]: 2025-11-01T00:59:08.300504Z INFO EnvHandler ExtHandler Configure routes Nov 1 00:59:08.301438 waagent[1620]: 2025-11-01T00:59:08.301185Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Nov 1 00:59:08.306852 waagent[1620]: 2025-11-01T00:59:08.306791Z INFO EnvHandler ExtHandler Gateway:None Nov 1 00:59:08.307410 waagent[1620]: 2025-11-01T00:59:08.307344Z INFO MonitorHandler ExtHandler Network interfaces: Nov 1 00:59:08.307410 waagent[1620]: Executing ['ip', '-a', '-o', 'link']: Nov 1 00:59:08.307410 waagent[1620]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Nov 1 00:59:08.307410 waagent[1620]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 60:45:bd:d1:8a:b7 brd ff:ff:ff:ff:ff:ff Nov 1 00:59:08.307410 waagent[1620]: 3: enP5540s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 60:45:bd:d1:8a:b7 brd ff:ff:ff:ff:ff:ff\ altname enP5540p0s2 Nov 1 00:59:08.307410 waagent[1620]: Executing ['ip', '-4', '-a', '-o', 'address']: Nov 1 00:59:08.307410 waagent[1620]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Nov 1 00:59:08.307410 waagent[1620]: 2: eth0 inet 10.200.4.8/24 metric 1024 brd 10.200.4.255 scope global eth0\ valid_lft forever preferred_lft forever Nov 1 00:59:08.307410 waagent[1620]: Executing ['ip', '-6', '-a', '-o', 'address']: Nov 1 00:59:08.307410 waagent[1620]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Nov 1 00:59:08.307410 waagent[1620]: 2: eth0 inet6 fe80::6245:bdff:fed1:8ab7/64 scope link \ valid_lft forever preferred_lft forever Nov 1 00:59:08.312704 waagent[1620]: 2025-11-01T00:59:08.312636Z INFO EnvHandler ExtHandler Routes:None Nov 1 00:59:08.314040 waagent[1620]: 2025-11-01T00:59:08.313980Z INFO ExtHandler ExtHandler Downloading agent manifest Nov 1 00:59:08.356389 waagent[1620]: 2025-11-01T00:59:08.356301Z INFO ExtHandler ExtHandler Nov 1 00:59:08.357605 waagent[1620]: 2025-11-01T00:59:08.357543Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Nov 1 00:59:08.366047 waagent[1620]: 2025-11-01T00:59:08.365968Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: f6d75ce3-72a2-45b4-885d-7f252206df3d correlation 1f597bdc-7b01-4715-970e-6facc7e8cc06 created: 2025-11-01T00:57:49.835480Z] Nov 1 00:59:08.372775 waagent[1620]: 2025-11-01T00:59:08.372712Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Nov 1 00:59:08.380565 waagent[1620]: 2025-11-01T00:59:08.380502Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 24 ms] Nov 1 00:59:08.385525 waagent[1620]: 2025-11-01T00:59:08.385468Z WARNING EnvHandler ExtHandler The firewall is not configured correctly. The following rules are missing: ['ACCEPT DNS'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n']. Will reset it. Current state: Nov 1 00:59:08.385525 waagent[1620]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.385525 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.385525 waagent[1620]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.385525 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.385525 waagent[1620]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.385525 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.385525 waagent[1620]: 91 12069 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:59:08.385525 waagent[1620]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:59:08.412107 waagent[1620]: 2025-11-01T00:59:08.412030Z INFO ExtHandler ExtHandler Looking for existing remote access users. Nov 1 00:59:08.417257 waagent[1620]: 2025-11-01T00:59:08.417135Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.15.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 581BAE3A-A2F3-4D60-801D-8D926B0DFB9D;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Nov 1 00:59:08.437762 waagent[1620]: 2025-11-01T00:59:08.437650Z INFO EnvHandler ExtHandler The firewall was setup successfully: Nov 1 00:59:08.437762 waagent[1620]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.437762 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.437762 waagent[1620]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.437762 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.437762 waagent[1620]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:59:08.437762 waagent[1620]: pkts bytes target prot opt in out source destination Nov 1 00:59:08.437762 waagent[1620]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Nov 1 00:59:08.437762 waagent[1620]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:59:08.437762 waagent[1620]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:59:08.439150 waagent[1620]: 2025-11-01T00:59:08.439091Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Nov 1 00:59:08.941313 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:59:08.941674 systemd[1]: Stopped kubelet.service. Nov 1 00:59:08.941735 systemd[1]: kubelet.service: Consumed 1.058s CPU time. Nov 1 00:59:08.943786 systemd[1]: Starting kubelet.service... Nov 1 00:59:09.297486 systemd[1]: Started kubelet.service. Nov 1 00:59:09.791859 kubelet[1670]: E1101 00:59:09.791809 1670 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:59:09.795205 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:59:09.795390 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:59:19.941797 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:59:19.942095 systemd[1]: Stopped kubelet.service. Nov 1 00:59:19.944138 systemd[1]: Starting kubelet.service... Nov 1 00:59:20.039208 systemd[1]: Started kubelet.service. Nov 1 00:59:20.821148 kubelet[1679]: E1101 00:59:20.821086 1679 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:59:20.822968 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:59:20.823174 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:59:30.941524 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Nov 1 00:59:30.941822 systemd[1]: Stopped kubelet.service. Nov 1 00:59:30.943857 systemd[1]: Starting kubelet.service... Nov 1 00:59:31.040500 systemd[1]: Started kubelet.service. Nov 1 00:59:31.079349 kubelet[1688]: E1101 00:59:31.079290 1688 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:59:31.080819 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:59:31.080981 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:59:35.622317 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Nov 1 00:59:36.730040 systemd[1]: Created slice system-sshd.slice. Nov 1 00:59:36.732310 systemd[1]: Started sshd@0-10.200.4.8:22-10.200.16.10:41882.service. Nov 1 00:59:37.561925 sshd[1695]: Accepted publickey for core from 10.200.16.10 port 41882 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 00:59:37.563550 sshd[1695]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:59:37.568284 systemd[1]: Started session-3.scope. Nov 1 00:59:37.568912 systemd-logind[1416]: New session 3 of user core. Nov 1 00:59:38.088515 systemd[1]: Started sshd@1-10.200.4.8:22-10.200.16.10:41886.service. Nov 1 00:59:38.683027 sshd[1700]: Accepted publickey for core from 10.200.16.10 port 41886 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 00:59:38.684882 sshd[1700]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:59:38.689604 systemd-logind[1416]: New session 4 of user core. Nov 1 00:59:38.690186 systemd[1]: Started session-4.scope. Nov 1 00:59:39.112416 sshd[1700]: pam_unix(sshd:session): session closed for user core Nov 1 00:59:39.115696 systemd[1]: sshd@1-10.200.4.8:22-10.200.16.10:41886.service: Deactivated successfully. Nov 1 00:59:39.116775 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:59:39.117573 systemd-logind[1416]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:59:39.118632 systemd-logind[1416]: Removed session 4. Nov 1 00:59:39.211781 systemd[1]: Started sshd@2-10.200.4.8:22-10.200.16.10:41896.service. Nov 1 00:59:39.807533 sshd[1706]: Accepted publickey for core from 10.200.16.10 port 41896 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 00:59:39.809209 sshd[1706]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:59:39.814965 systemd[1]: Started session-5.scope. Nov 1 00:59:39.815726 systemd-logind[1416]: New session 5 of user core. Nov 1 00:59:40.224721 sshd[1706]: pam_unix(sshd:session): session closed for user core Nov 1 00:59:40.227757 systemd[1]: sshd@2-10.200.4.8:22-10.200.16.10:41896.service: Deactivated successfully. Nov 1 00:59:40.228602 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:59:40.229224 systemd-logind[1416]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:59:40.229985 systemd-logind[1416]: Removed session 5. Nov 1 00:59:40.324821 systemd[1]: Started sshd@3-10.200.4.8:22-10.200.16.10:39658.service. Nov 1 00:59:40.919474 sshd[1712]: Accepted publickey for core from 10.200.16.10 port 39658 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 00:59:40.921114 sshd[1712]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:59:40.926243 systemd[1]: Started session-6.scope. Nov 1 00:59:40.926716 systemd-logind[1416]: New session 6 of user core. Nov 1 00:59:41.191443 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Nov 1 00:59:41.191722 systemd[1]: Stopped kubelet.service. Nov 1 00:59:41.193776 systemd[1]: Starting kubelet.service... Nov 1 00:59:41.294580 systemd[1]: Started kubelet.service. Nov 1 00:59:41.329456 kubelet[1720]: E1101 00:59:41.329407 1720 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:59:41.330975 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:59:41.331136 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:59:41.345484 sshd[1712]: pam_unix(sshd:session): session closed for user core Nov 1 00:59:41.348044 systemd[1]: sshd@3-10.200.4.8:22-10.200.16.10:39658.service: Deactivated successfully. Nov 1 00:59:41.349092 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:59:41.349130 systemd-logind[1416]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:59:41.350103 systemd-logind[1416]: Removed session 6. Nov 1 00:59:41.443601 systemd[1]: Started sshd@4-10.200.4.8:22-10.200.16.10:39668.service. Nov 1 00:59:42.032099 sshd[1727]: Accepted publickey for core from 10.200.16.10 port 39668 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 00:59:42.033795 sshd[1727]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:59:42.039409 systemd[1]: Started session-7.scope. Nov 1 00:59:42.039853 systemd-logind[1416]: New session 7 of user core. Nov 1 00:59:42.536932 sudo[1730]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:59:42.537305 sudo[1730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:59:42.560528 dbus-daemon[1403]: Н¿\xcdU: received setenforce notice (enforcing=1266961376) Nov 1 00:59:42.562384 sudo[1730]: pam_unix(sudo:session): session closed for user root Nov 1 00:59:42.684879 sshd[1727]: pam_unix(sshd:session): session closed for user core Nov 1 00:59:42.688614 systemd[1]: sshd@4-10.200.4.8:22-10.200.16.10:39668.service: Deactivated successfully. Nov 1 00:59:42.689714 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:59:42.690570 systemd-logind[1416]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:59:42.691565 systemd-logind[1416]: Removed session 7. Nov 1 00:59:42.770056 update_engine[1417]: I1101 00:59:42.769975 1417 update_attempter.cc:509] Updating boot flags... Nov 1 00:59:42.782486 systemd[1]: Started sshd@5-10.200.4.8:22-10.200.16.10:39680.service. Nov 1 00:59:43.373323 sshd[1735]: Accepted publickey for core from 10.200.16.10 port 39680 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 00:59:43.375099 sshd[1735]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:59:43.380261 systemd[1]: Started session-8.scope. Nov 1 00:59:43.380884 systemd-logind[1416]: New session 8 of user core. Nov 1 00:59:43.698056 sudo[1804]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:59:43.698371 sudo[1804]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:59:43.701089 sudo[1804]: pam_unix(sudo:session): session closed for user root Nov 1 00:59:43.705685 sudo[1803]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:59:43.705977 sudo[1803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:59:43.714565 systemd[1]: Stopping audit-rules.service... Nov 1 00:59:43.715922 auditctl[1807]: No rules Nov 1 00:59:43.716195 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:59:43.722390 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:59:43.722455 kernel: audit: type=1305 audit(1761958783.714:216): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:59:43.714000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:59:43.716391 systemd[1]: Stopped audit-rules.service. Nov 1 00:59:43.717925 systemd[1]: Starting audit-rules.service... Nov 1 00:59:43.714000 audit[1807]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdebc57500 a2=420 a3=0 items=0 ppid=1 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:43.742866 kernel: audit: type=1300 audit(1761958783.714:216): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdebc57500 a2=420 a3=0 items=0 ppid=1 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:43.714000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:59:43.743548 augenrules[1824]: No rules Nov 1 00:59:43.744277 systemd[1]: Finished audit-rules.service. Nov 1 00:59:43.745231 sudo[1803]: pam_unix(sudo:session): session closed for user root Nov 1 00:59:43.747324 kernel: audit: type=1327 audit(1761958783.714:216): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:59:43.747432 kernel: audit: type=1131 audit(1761958783.715:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.758349 kernel: audit: type=1130 audit(1761958783.743:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.743000 audit[1803]: USER_END pid=1803 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.769352 kernel: audit: type=1106 audit(1761958783.743:219): pid=1803 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.744000 audit[1803]: CRED_DISP pid=1803 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.790985 kernel: audit: type=1104 audit(1761958783.744:220): pid=1803 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.855487 sshd[1735]: pam_unix(sshd:session): session closed for user core Nov 1 00:59:43.855000 audit[1735]: USER_END pid=1735 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:59:43.858514 systemd[1]: sshd@5-10.200.4.8:22-10.200.16.10:39680.service: Deactivated successfully. Nov 1 00:59:43.859213 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:59:43.860513 systemd-logind[1416]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:59:43.861401 systemd-logind[1416]: Removed session 8. Nov 1 00:59:43.855000 audit[1735]: CRED_DISP pid=1735 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:59:43.885914 kernel: audit: type=1106 audit(1761958783.855:221): pid=1735 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:59:43.885978 kernel: audit: type=1104 audit(1761958783.855:222): pid=1735 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:59:43.886005 kernel: audit: type=1131 audit(1761958783.855:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.4.8:22-10.200.16.10:39680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.4.8:22-10.200.16.10:39680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:43.958677 systemd[1]: Started sshd@6-10.200.4.8:22-10.200.16.10:39684.service. Nov 1 00:59:43.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.4.8:22-10.200.16.10:39684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:44.557000 audit[1830]: USER_ACCT pid=1830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:59:44.559162 sshd[1830]: Accepted publickey for core from 10.200.16.10 port 39684 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 00:59:44.558000 audit[1830]: CRED_ACQ pid=1830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:59:44.558000 audit[1830]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe40822510 a2=3 a3=0 items=0 ppid=1 pid=1830 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:44.558000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:59:44.560691 sshd[1830]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:59:44.565422 systemd[1]: Started session-9.scope. Nov 1 00:59:44.565872 systemd-logind[1416]: New session 9 of user core. Nov 1 00:59:44.569000 audit[1830]: USER_START pid=1830 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:59:44.570000 audit[1832]: CRED_ACQ pid=1832 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:59:44.888000 audit[1833]: USER_ACCT pid=1833 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:59:44.888000 audit[1833]: CRED_REFR pid=1833 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:59:44.889481 sudo[1833]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:59:44.889791 sudo[1833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:59:44.890000 audit[1833]: USER_START pid=1833 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:59:44.913433 systemd[1]: Starting docker.service... Nov 1 00:59:44.948810 env[1843]: time="2025-11-01T00:59:44.948772806Z" level=info msg="Starting up" Nov 1 00:59:44.950183 env[1843]: time="2025-11-01T00:59:44.950155509Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:59:44.950183 env[1843]: time="2025-11-01T00:59:44.950173409Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:59:44.950359 env[1843]: time="2025-11-01T00:59:44.950193809Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:59:44.950359 env[1843]: time="2025-11-01T00:59:44.950205809Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:59:44.951724 env[1843]: time="2025-11-01T00:59:44.951704012Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:59:44.951860 env[1843]: time="2025-11-01T00:59:44.951836213Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:59:44.951963 env[1843]: time="2025-11-01T00:59:44.951950113Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:59:44.952012 env[1843]: time="2025-11-01T00:59:44.952004013Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:59:44.959150 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport788318-merged.mount: Deactivated successfully. Nov 1 00:59:45.072191 env[1843]: time="2025-11-01T00:59:45.072150161Z" level=info msg="Loading containers: start." Nov 1 00:59:45.131000 audit[1869]: NETFILTER_CFG table=nat:9 family=2 entries=2 op=nft_register_chain pid=1869 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.131000 audit[1869]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff764695d0 a2=0 a3=7fff764695bc items=0 ppid=1843 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.131000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:59:45.133000 audit[1871]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1871 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.133000 audit[1871]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff2119f390 a2=0 a3=7fff2119f37c items=0 ppid=1843 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.133000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:59:45.135000 audit[1873]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1873 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.135000 audit[1873]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdcb710610 a2=0 a3=7ffdcb7105fc items=0 ppid=1843 pid=1873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.135000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:59:45.137000 audit[1875]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1875 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.137000 audit[1875]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe3244ba40 a2=0 a3=7ffe3244ba2c items=0 ppid=1843 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.137000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:59:45.139000 audit[1877]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1877 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.139000 audit[1877]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdf4dcb900 a2=0 a3=7ffdf4dcb8ec items=0 ppid=1843 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.139000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:59:45.142000 audit[1879]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_rule pid=1879 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.142000 audit[1879]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff548f2d50 a2=0 a3=7fff548f2d3c items=0 ppid=1843 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.142000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:59:45.161000 audit[1881]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_chain pid=1881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.161000 audit[1881]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc4b9d55c0 a2=0 a3=7ffc4b9d55ac items=0 ppid=1843 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.161000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:59:45.163000 audit[1883]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1883 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.163000 audit[1883]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff9b9b0810 a2=0 a3=7fff9b9b07fc items=0 ppid=1843 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.163000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:59:45.164000 audit[1885]: NETFILTER_CFG table=filter:17 family=2 entries=2 op=nft_register_chain pid=1885 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.164000 audit[1885]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd66120760 a2=0 a3=7ffd6612074c items=0 ppid=1843 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.164000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:59:45.186000 audit[1889]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_unregister_rule pid=1889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.186000 audit[1889]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffca985ed30 a2=0 a3=7ffca985ed1c items=0 ppid=1843 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.186000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:59:45.190000 audit[1890]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1890 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.190000 audit[1890]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff79737350 a2=0 a3=7fff7973733c items=0 ppid=1843 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.190000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:59:45.218353 kernel: Initializing XFRM netlink socket Nov 1 00:59:45.242041 env[1843]: time="2025-11-01T00:59:45.241999299Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:59:45.289000 audit[1897]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.289000 audit[1897]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe29dc7a30 a2=0 a3=7ffe29dc7a1c items=0 ppid=1843 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.289000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:59:45.314000 audit[1900]: NETFILTER_CFG table=nat:21 family=2 entries=1 op=nft_register_rule pid=1900 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.314000 audit[1900]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff2a5633c0 a2=0 a3=7fff2a5633ac items=0 ppid=1843 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.314000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:59:45.318000 audit[1903]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1903 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.318000 audit[1903]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdc2987f40 a2=0 a3=7ffdc2987f2c items=0 ppid=1843 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.318000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:59:45.320000 audit[1905]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1905 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.320000 audit[1905]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc16e893b0 a2=0 a3=7ffc16e8939c items=0 ppid=1843 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.320000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:59:45.322000 audit[1907]: NETFILTER_CFG table=nat:24 family=2 entries=2 op=nft_register_chain pid=1907 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.322000 audit[1907]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc106d9a60 a2=0 a3=7ffc106d9a4c items=0 ppid=1843 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:59:45.324000 audit[1909]: NETFILTER_CFG table=nat:25 family=2 entries=2 op=nft_register_chain pid=1909 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.324000 audit[1909]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe6b1d2700 a2=0 a3=7ffe6b1d26ec items=0 ppid=1843 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.324000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:59:45.326000 audit[1911]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1911 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.326000 audit[1911]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc88f2ad30 a2=0 a3=7ffc88f2ad1c items=0 ppid=1843 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.326000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:59:45.328000 audit[1913]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1913 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.328000 audit[1913]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd84de12c0 a2=0 a3=7ffd84de12ac items=0 ppid=1843 pid=1913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.328000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:59:45.330000 audit[1915]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1915 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.330000 audit[1915]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff906a9640 a2=0 a3=7fff906a962c items=0 ppid=1843 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.330000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:59:45.332000 audit[1917]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1917 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.332000 audit[1917]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc8ba11550 a2=0 a3=7ffc8ba1153c items=0 ppid=1843 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:59:45.334000 audit[1919]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1919 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.334000 audit[1919]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffeb8d3320 a2=0 a3=7fffeb8d330c items=0 ppid=1843 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.334000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:59:45.336708 systemd-networkd[1577]: docker0: Link UP Nov 1 00:59:45.351000 audit[1923]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_unregister_rule pid=1923 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.351000 audit[1923]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd32ac54d0 a2=0 a3=7ffd32ac54bc items=0 ppid=1843 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.351000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:59:45.355000 audit[1924]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_rule pid=1924 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:59:45.355000 audit[1924]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe9d218300 a2=0 a3=7ffe9d2182ec items=0 ppid=1843 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:59:45.355000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:59:45.357686 env[1843]: time="2025-11-01T00:59:45.357652829Z" level=info msg="Loading containers: done." Nov 1 00:59:45.428847 env[1843]: time="2025-11-01T00:59:45.427564369Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:59:45.428847 env[1843]: time="2025-11-01T00:59:45.427871969Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:59:45.428847 env[1843]: time="2025-11-01T00:59:45.428257270Z" level=info msg="Daemon has completed initialization" Nov 1 00:59:45.466929 systemd[1]: Started docker.service. Nov 1 00:59:45.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:45.477403 env[1843]: time="2025-11-01T00:59:45.477326368Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:59:46.866178 env[1425]: time="2025-11-01T00:59:46.866133025Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Nov 1 00:59:47.711458 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1421319544.mount: Deactivated successfully. Nov 1 00:59:51.441253 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Nov 1 00:59:51.441591 systemd[1]: Stopped kubelet.service. Nov 1 00:59:51.455887 kernel: kauditd_printk_skb: 84 callbacks suppressed Nov 1 00:59:51.456013 kernel: audit: type=1130 audit(1761958791.440:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:51.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:51.443741 systemd[1]: Starting kubelet.service... Nov 1 00:59:51.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:51.468350 kernel: audit: type=1131 audit(1761958791.440:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:51.778045 systemd[1]: Started kubelet.service. Nov 1 00:59:51.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:51.790395 kernel: audit: type=1130 audit(1761958791.777:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:59:52.165867 kubelet[1961]: E1101 00:59:52.165753 1961 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:59:52.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:59:52.167531 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:59:52.167643 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:59:52.180353 kernel: audit: type=1131 audit(1761958792.166:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 01:00:02.142971 env[1425]: time="2025-11-01T01:00:02.142908764Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:02.155892 env[1425]: time="2025-11-01T01:00:02.155837887Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:abd2b525baf428ffb8b8b7d1e09761dc5cdb7ed0c7896a9427e29e84f8eafc59,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:02.162999 env[1425]: time="2025-11-01T01:00:02.162947385Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:02.173598 env[1425]: time="2025-11-01T01:00:02.173546077Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:02.174345 env[1425]: time="2025-11-01T01:00:02.174296619Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:abd2b525baf428ffb8b8b7d1e09761dc5cdb7ed0c7896a9427e29e84f8eafc59\"" Nov 1 01:00:02.175452 env[1425]: time="2025-11-01T01:00:02.175414281Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Nov 1 01:00:02.191088 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Nov 1 01:00:02.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:02.191351 systemd[1]: Stopped kubelet.service. Nov 1 01:00:02.206424 kernel: audit: type=1130 audit(1761958802.191:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:02.192875 systemd[1]: Starting kubelet.service... Nov 1 01:00:02.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:02.220793 kernel: audit: type=1131 audit(1761958802.191:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:02.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:02.445574 systemd[1]: Started kubelet.service. Nov 1 01:00:02.462491 kernel: audit: type=1130 audit(1761958802.444:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:02.944666 kubelet[1971]: E1101 01:00:02.944620 1971 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 01:00:02.946292 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 01:00:02.946472 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 01:00:02.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 01:00:02.960369 kernel: audit: type=1131 audit(1761958802.945:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 01:00:04.808597 env[1425]: time="2025-11-01T01:00:04.808528089Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:04.819731 env[1425]: time="2025-11-01T01:00:04.819680079Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0debe32fbb7223500fcf8c312f2a568a5abd3ed9274d8ec6780cfb30b8861e91,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:04.828516 env[1425]: time="2025-11-01T01:00:04.828465944Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:04.834824 env[1425]: time="2025-11-01T01:00:04.834779679Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:04.835603 env[1425]: time="2025-11-01T01:00:04.835565720Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:0debe32fbb7223500fcf8c312f2a568a5abd3ed9274d8ec6780cfb30b8861e91\"" Nov 1 01:00:04.836278 env[1425]: time="2025-11-01T01:00:04.836253757Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Nov 1 01:00:06.484935 env[1425]: time="2025-11-01T01:00:06.484874642Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:06.495349 env[1425]: time="2025-11-01T01:00:06.495294965Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6934c23b154fcb9bf54ed5913782de746735a49f4daa4732285915050cd44ad5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:06.498492 env[1425]: time="2025-11-01T01:00:06.498456923Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:06.519025 env[1425]: time="2025-11-01T01:00:06.518974652Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:06.519771 env[1425]: time="2025-11-01T01:00:06.519733990Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:6934c23b154fcb9bf54ed5913782de746735a49f4daa4732285915050cd44ad5\"" Nov 1 01:00:06.520415 env[1425]: time="2025-11-01T01:00:06.520387423Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Nov 1 01:00:07.771453 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4159749333.mount: Deactivated successfully. Nov 1 01:00:08.413838 env[1425]: time="2025-11-01T01:00:08.413781032Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:08.420534 env[1425]: time="2025-11-01T01:00:08.420494351Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fa3fdca615a501743d8deb39729a96e731312aac8d96accec061d5265360332f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:08.426357 env[1425]: time="2025-11-01T01:00:08.426306027Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:08.430460 env[1425]: time="2025-11-01T01:00:08.430422022Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:08.430733 env[1425]: time="2025-11-01T01:00:08.430697435Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:fa3fdca615a501743d8deb39729a96e731312aac8d96accec061d5265360332f\"" Nov 1 01:00:08.434627 env[1425]: time="2025-11-01T01:00:08.434594921Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Nov 1 01:00:09.041500 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1645372462.mount: Deactivated successfully. Nov 1 01:00:10.482498 env[1425]: time="2025-11-01T01:00:10.482433687Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:10.489602 env[1425]: time="2025-11-01T01:00:10.489555608Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:10.493482 env[1425]: time="2025-11-01T01:00:10.493449283Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:10.497808 env[1425]: time="2025-11-01T01:00:10.497777678Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:10.498451 env[1425]: time="2025-11-01T01:00:10.498418607Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Nov 1 01:00:10.499133 env[1425]: time="2025-11-01T01:00:10.499107038Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 01:00:11.121804 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3974662396.mount: Deactivated successfully. Nov 1 01:00:11.146288 env[1425]: time="2025-11-01T01:00:11.146235225Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:11.154290 env[1425]: time="2025-11-01T01:00:11.154238976Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:11.161109 env[1425]: time="2025-11-01T01:00:11.161069576Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:11.164742 env[1425]: time="2025-11-01T01:00:11.164701335Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:11.165276 env[1425]: time="2025-11-01T01:00:11.165237659Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Nov 1 01:00:11.166034 env[1425]: time="2025-11-01T01:00:11.166008492Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Nov 1 01:00:11.923270 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1003225856.mount: Deactivated successfully. Nov 1 01:00:13.191310 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 7. Nov 1 01:00:13.191687 systemd[1]: Stopped kubelet.service. Nov 1 01:00:13.207875 kernel: audit: type=1130 audit(1761958813.190:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:13.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:13.193679 systemd[1]: Starting kubelet.service... Nov 1 01:00:13.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:13.223362 kernel: audit: type=1131 audit(1761958813.190:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:13.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:13.297171 systemd[1]: Started kubelet.service. Nov 1 01:00:13.312398 kernel: audit: type=1130 audit(1761958813.296:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:13.341177 kubelet[1981]: E1101 01:00:13.341130 1981 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 01:00:14.117591 kernel: audit: type=1131 audit(1761958813.341:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 01:00:13.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 01:00:13.342685 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 01:00:13.342798 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 01:00:15.649880 env[1425]: time="2025-11-01T01:00:15.649649171Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:15.655265 env[1425]: time="2025-11-01T01:00:15.655225492Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:15.659569 env[1425]: time="2025-11-01T01:00:15.659530562Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:15.663485 env[1425]: time="2025-11-01T01:00:15.663454317Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:15.664230 env[1425]: time="2025-11-01T01:00:15.664196846Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Nov 1 01:00:18.406998 systemd[1]: Stopped kubelet.service. Nov 1 01:00:18.421892 kernel: audit: type=1130 audit(1761958818.406:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:18.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:18.409477 systemd[1]: Starting kubelet.service... Nov 1 01:00:18.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:18.437520 kernel: audit: type=1131 audit(1761958818.406:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:18.467823 systemd[1]: Reloading. Nov 1 01:00:18.540676 /usr/lib/systemd/system-generators/torcx-generator[2034]: time="2025-11-01T01:00:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 01:00:18.541144 /usr/lib/systemd/system-generators/torcx-generator[2034]: time="2025-11-01T01:00:18Z" level=info msg="torcx already run" Nov 1 01:00:18.647971 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 01:00:18.647992 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 01:00:18.664550 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.754350 kernel: audit: type=1400 audit(1761958818.740:272): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.767397 kernel: audit: type=1400 audit(1761958818.740:273): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.781605 kernel: audit: type=1400 audit(1761958818.740:274): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.802242 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 01:00:18.802319 kernel: audit: type=1400 audit(1761958818.740:275): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.802358 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.823974 kernel: audit: type=1400 audit(1761958818.740:276): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.824071 kernel: audit: backlog limit exceeded Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.753000 audit: BPF prog-id=47 op=LOAD Nov 1 01:00:18.753000 audit: BPF prog-id=46 op=UNLOAD Nov 1 01:00:18.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit: BPF prog-id=48 op=LOAD Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.767000 audit: BPF prog-id=49 op=LOAD Nov 1 01:00:18.767000 audit: BPF prog-id=31 op=UNLOAD Nov 1 01:00:18.767000 audit: BPF prog-id=32 op=UNLOAD Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.782000 audit: BPF prog-id=50 op=LOAD Nov 1 01:00:18.782000 audit: BPF prog-id=41 op=UNLOAD Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit: BPF prog-id=51 op=LOAD Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.783000 audit: BPF prog-id=52 op=LOAD Nov 1 01:00:18.783000 audit: BPF prog-id=42 op=UNLOAD Nov 1 01:00:18.783000 audit: BPF prog-id=43 op=UNLOAD Nov 1 01:00:18.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.823000 audit: BPF prog-id=33 op=UNLOAD Nov 1 01:00:18.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit: BPF prog-id=56 op=LOAD Nov 1 01:00:18.825000 audit: BPF prog-id=39 op=UNLOAD Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.826000 audit: BPF prog-id=57 op=LOAD Nov 1 01:00:18.826000 audit: BPF prog-id=44 op=UNLOAD Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit: BPF prog-id=58 op=LOAD Nov 1 01:00:18.829000 audit: BPF prog-id=36 op=UNLOAD Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit: BPF prog-id=59 op=LOAD Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.829000 audit: BPF prog-id=60 op=LOAD Nov 1 01:00:18.829000 audit: BPF prog-id=37 op=UNLOAD Nov 1 01:00:18.829000 audit: BPF prog-id=38 op=UNLOAD Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:18.830000 audit: BPF prog-id=61 op=LOAD Nov 1 01:00:18.830000 audit: BPF prog-id=40 op=UNLOAD Nov 1 01:00:18.865040 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Nov 1 01:00:18.865149 systemd[1]: kubelet.service: Failed with result 'signal'. Nov 1 01:00:18.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 01:00:18.865470 systemd[1]: Stopped kubelet.service. Nov 1 01:00:18.867727 systemd[1]: Starting kubelet.service... Nov 1 01:00:20.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:20.021278 systemd[1]: Started kubelet.service. Nov 1 01:00:20.058527 kubelet[2099]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 01:00:20.058527 kubelet[2099]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 01:00:20.058527 kubelet[2099]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 01:00:20.058964 kubelet[2099]: I1101 01:00:20.058596 2099 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 01:00:20.534870 kubelet[2099]: I1101 01:00:20.534828 2099 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 01:00:20.534870 kubelet[2099]: I1101 01:00:20.534865 2099 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 01:00:20.535568 kubelet[2099]: I1101 01:00:20.535544 2099 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 01:00:21.393479 kubelet[2099]: E1101 01:00:21.393439 2099 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.4.8:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:21.394836 kubelet[2099]: I1101 01:00:21.394804 2099 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 01:00:21.400669 kubelet[2099]: E1101 01:00:21.400629 2099 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 01:00:21.400669 kubelet[2099]: I1101 01:00:21.400669 2099 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 01:00:21.405298 kubelet[2099]: I1101 01:00:21.405275 2099 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 01:00:21.405591 kubelet[2099]: I1101 01:00:21.405553 2099 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 01:00:21.405781 kubelet[2099]: I1101 01:00:21.405591 2099 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-9d78d981c4","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 01:00:21.406584 kubelet[2099]: I1101 01:00:21.406566 2099 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 01:00:21.406666 kubelet[2099]: I1101 01:00:21.406593 2099 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 01:00:21.406748 kubelet[2099]: I1101 01:00:21.406732 2099 state_mem.go:36] "Initialized new in-memory state store" Nov 1 01:00:21.409842 kubelet[2099]: I1101 01:00:21.409820 2099 kubelet.go:446] "Attempting to sync node with API server" Nov 1 01:00:21.409940 kubelet[2099]: I1101 01:00:21.409859 2099 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 01:00:21.409940 kubelet[2099]: I1101 01:00:21.409886 2099 kubelet.go:352] "Adding apiserver pod source" Nov 1 01:00:21.409940 kubelet[2099]: I1101 01:00:21.409899 2099 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 01:00:21.424863 kubelet[2099]: I1101 01:00:21.424842 2099 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 01:00:21.425349 kubelet[2099]: I1101 01:00:21.425313 2099 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 01:00:21.425429 kubelet[2099]: W1101 01:00:21.425403 2099 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 01:00:21.427560 kubelet[2099]: I1101 01:00:21.427537 2099 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 01:00:21.427642 kubelet[2099]: I1101 01:00:21.427580 2099 server.go:1287] "Started kubelet" Nov 1 01:00:21.427778 kubelet[2099]: W1101 01:00:21.427734 2099 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.4.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-9d78d981c4&limit=500&resourceVersion=0": dial tcp 10.200.4.8:6443: connect: connection refused Nov 1 01:00:21.427841 kubelet[2099]: E1101 01:00:21.427792 2099 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.4.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-9d78d981c4&limit=500&resourceVersion=0\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:21.427926 kubelet[2099]: W1101 01:00:21.427889 2099 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.4.8:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.4.8:6443: connect: connection refused Nov 1 01:00:21.427992 kubelet[2099]: E1101 01:00:21.427933 2099 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.4.8:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:21.465960 kubelet[2099]: I1101 01:00:21.465901 2099 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 01:00:21.466247 kubelet[2099]: I1101 01:00:21.466189 2099 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 01:00:21.466663 kubelet[2099]: I1101 01:00:21.466637 2099 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 01:00:21.469221 kubelet[2099]: E1101 01:00:21.467859 2099 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.4.8:6443/api/v1/namespaces/default/events\": dial tcp 10.200.4.8:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-9d78d981c4.1873bc367c0e3a2c default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-9d78d981c4,UID:ci-3510.3.8-n-9d78d981c4,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-9d78d981c4,},FirstTimestamp:2025-11-01 01:00:21.427558956 +0000 UTC m=+1.400154435,LastTimestamp:2025-11-01 01:00:21.427558956 +0000 UTC m=+1.400154435,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-9d78d981c4,}" Nov 1 01:00:21.471769 kubelet[2099]: I1101 01:00:21.471743 2099 server.go:479] "Adding debug handlers to kubelet server" Nov 1 01:00:21.473694 kubelet[2099]: E1101 01:00:21.473676 2099 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 01:00:21.475000 audit[2099]: AVC avc: denied { mac_admin } for pid=2099 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:21.475000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 01:00:21.475000 audit[2099]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a64030 a1=c000a72018 a2=c000a64000 a3=25 items=0 ppid=1 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.475000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 01:00:21.475000 audit[2099]: AVC avc: denied { mac_admin } for pid=2099 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:21.475000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 01:00:21.475000 audit[2099]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a68060 a1=c000a72048 a2=c000a640c0 a3=25 items=0 ppid=1 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.475000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 01:00:21.476514 kubelet[2099]: I1101 01:00:21.475919 2099 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 01:00:21.476514 kubelet[2099]: I1101 01:00:21.475979 2099 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 01:00:21.476514 kubelet[2099]: I1101 01:00:21.476059 2099 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 01:00:21.477065 kubelet[2099]: I1101 01:00:21.477043 2099 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 01:00:21.479000 audit[2111]: NETFILTER_CFG table=mangle:33 family=2 entries=2 op=nft_register_chain pid=2111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:21.479000 audit[2111]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe836be280 a2=0 a3=7ffe836be26c items=0 ppid=2099 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.479000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 01:00:21.480000 audit[2112]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2112 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:21.480000 audit[2112]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4d788300 a2=0 a3=7fff4d7882ec items=0 ppid=2099 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.480000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 01:00:21.481581 kubelet[2099]: E1101 01:00:21.481272 2099 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" Nov 1 01:00:21.481689 kubelet[2099]: I1101 01:00:21.481678 2099 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 01:00:21.481971 kubelet[2099]: I1101 01:00:21.481951 2099 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 01:00:21.482108 kubelet[2099]: I1101 01:00:21.482097 2099 reconciler.go:26] "Reconciler: start to sync state" Nov 1 01:00:21.483279 kubelet[2099]: W1101 01:00:21.483237 2099 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.4.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.4.8:6443: connect: connection refused Nov 1 01:00:21.483437 kubelet[2099]: E1101 01:00:21.483416 2099 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.4.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:21.483000 audit[2114]: NETFILTER_CFG table=filter:35 family=2 entries=2 op=nft_register_chain pid=2114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:21.483000 audit[2114]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe07cb4930 a2=0 a3=7ffe07cb491c items=0 ppid=2099 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.483000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 01:00:21.484820 kubelet[2099]: I1101 01:00:21.484803 2099 factory.go:221] Registration of the containerd container factory successfully Nov 1 01:00:21.484919 kubelet[2099]: I1101 01:00:21.484908 2099 factory.go:221] Registration of the systemd container factory successfully Nov 1 01:00:21.485051 kubelet[2099]: I1101 01:00:21.485035 2099 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 01:00:21.486000 audit[2116]: NETFILTER_CFG table=filter:36 family=2 entries=2 op=nft_register_chain pid=2116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:21.486000 audit[2116]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd4519e500 a2=0 a3=7ffd4519e4ec items=0 ppid=2099 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.486000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 01:00:21.490674 kubelet[2099]: E1101 01:00:21.490633 2099 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.4.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-9d78d981c4?timeout=10s\": dial tcp 10.200.4.8:6443: connect: connection refused" interval="200ms" Nov 1 01:00:21.506798 kubelet[2099]: I1101 01:00:21.506773 2099 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 01:00:21.506798 kubelet[2099]: I1101 01:00:21.506789 2099 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 01:00:21.506939 kubelet[2099]: I1101 01:00:21.506806 2099 state_mem.go:36] "Initialized new in-memory state store" Nov 1 01:00:21.513571 kubelet[2099]: I1101 01:00:21.513547 2099 policy_none.go:49] "None policy: Start" Nov 1 01:00:21.513571 kubelet[2099]: I1101 01:00:21.513571 2099 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 01:00:21.513699 kubelet[2099]: I1101 01:00:21.513584 2099 state_mem.go:35] "Initializing new in-memory state store" Nov 1 01:00:21.521926 systemd[1]: Created slice kubepods.slice. Nov 1 01:00:21.526597 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 01:00:21.529643 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 01:00:21.535987 kubelet[2099]: I1101 01:00:21.535964 2099 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 01:00:21.535000 audit[2099]: AVC avc: denied { mac_admin } for pid=2099 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:21.535000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 01:00:21.535000 audit[2099]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d480f0 a1=c000d3f110 a2=c000d480c0 a3=25 items=0 ppid=1 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.535000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 01:00:21.536367 kubelet[2099]: I1101 01:00:21.536033 2099 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 01:00:21.536367 kubelet[2099]: I1101 01:00:21.536155 2099 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 01:00:21.536367 kubelet[2099]: I1101 01:00:21.536169 2099 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 01:00:21.537417 kubelet[2099]: I1101 01:00:21.536896 2099 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 01:00:21.538926 kubelet[2099]: E1101 01:00:21.538740 2099 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 01:00:21.538926 kubelet[2099]: E1101 01:00:21.538786 2099 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-9d78d981c4\" not found" Nov 1 01:00:21.596000 audit[2121]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2121 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:21.596000 audit[2121]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fffbb9aa530 a2=0 a3=7fffbb9aa51c items=0 ppid=2099 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.596000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 01:00:21.597404 kubelet[2099]: I1101 01:00:21.597356 2099 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 01:00:21.598000 audit[2123]: NETFILTER_CFG table=mangle:38 family=10 entries=2 op=nft_register_chain pid=2123 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:21.598000 audit[2123]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd0f148230 a2=0 a3=7ffd0f14821c items=0 ppid=2099 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.598000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 01:00:21.599670 kubelet[2099]: I1101 01:00:21.599647 2099 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 01:00:21.599799 kubelet[2099]: I1101 01:00:21.599784 2099 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 01:00:21.599000 audit[2124]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:21.599000 audit[2124]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe3e6b0160 a2=0 a3=7ffe3e6b014c items=0 ppid=2099 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.599000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 01:00:21.600259 kubelet[2099]: I1101 01:00:21.600236 2099 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 01:00:21.600407 kubelet[2099]: I1101 01:00:21.600261 2099 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 01:00:21.600536 kubelet[2099]: E1101 01:00:21.600512 2099 kubelet.go:2406] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Nov 1 01:00:21.601190 kubelet[2099]: W1101 01:00:21.601151 2099 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.4.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.4.8:6443: connect: connection refused Nov 1 01:00:21.601273 kubelet[2099]: E1101 01:00:21.601206 2099 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.4.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:21.601000 audit[2126]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2126 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:21.601000 audit[2126]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc85340530 a2=0 a3=7ffc8534051c items=0 ppid=2099 pid=2126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.601000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 01:00:21.602000 audit[2127]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:21.602000 audit[2127]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb5a08df0 a2=0 a3=7ffeb5a08ddc items=0 ppid=2099 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.602000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 01:00:21.603000 audit[2128]: NETFILTER_CFG table=nat:42 family=10 entries=2 op=nft_register_chain pid=2128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:21.603000 audit[2128]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd320045b0 a2=0 a3=7ffd3200459c items=0 ppid=2099 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.603000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 01:00:21.604000 audit[2129]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:21.604000 audit[2129]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9cc2eeb0 a2=0 a3=7ffd9cc2ee9c items=0 ppid=2099 pid=2129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.604000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 01:00:21.605000 audit[2130]: NETFILTER_CFG table=filter:44 family=10 entries=2 op=nft_register_chain pid=2130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:21.605000 audit[2130]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc492aa520 a2=0 a3=10e3 items=0 ppid=2099 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:21.605000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 01:00:21.638718 kubelet[2099]: I1101 01:00:21.638660 2099 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.639133 kubelet[2099]: E1101 01:00:21.639084 2099 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.4.8:6443/api/v1/nodes\": dial tcp 10.200.4.8:6443: connect: connection refused" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.692100 kubelet[2099]: E1101 01:00:21.692060 2099 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.4.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-9d78d981c4?timeout=10s\": dial tcp 10.200.4.8:6443: connect: connection refused" interval="400ms" Nov 1 01:00:21.710379 systemd[1]: Created slice kubepods-burstable-podc2613e7bbc5a280f46aa69907651e98f.slice. Nov 1 01:00:21.715947 kubelet[2099]: E1101 01:00:21.715921 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.719423 systemd[1]: Created slice kubepods-burstable-pod89ccc5e7738357fab10fb9a329cc2122.slice. Nov 1 01:00:21.721486 kubelet[2099]: E1101 01:00:21.721106 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.723935 systemd[1]: Created slice kubepods-burstable-pod9f616821c35ae586a1973da8f00f197e.slice. Nov 1 01:00:21.726073 kubelet[2099]: E1101 01:00:21.726055 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784522 kubelet[2099]: I1101 01:00:21.784472 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c2613e7bbc5a280f46aa69907651e98f-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" (UID: \"c2613e7bbc5a280f46aa69907651e98f\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784522 kubelet[2099]: I1101 01:00:21.784520 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c2613e7bbc5a280f46aa69907651e98f-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" (UID: \"c2613e7bbc5a280f46aa69907651e98f\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784734 kubelet[2099]: I1101 01:00:21.784552 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784734 kubelet[2099]: I1101 01:00:21.784577 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c2613e7bbc5a280f46aa69907651e98f-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" (UID: \"c2613e7bbc5a280f46aa69907651e98f\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784734 kubelet[2099]: I1101 01:00:21.784605 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784734 kubelet[2099]: I1101 01:00:21.784631 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784734 kubelet[2099]: I1101 01:00:21.784658 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784970 kubelet[2099]: I1101 01:00:21.784686 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.784970 kubelet[2099]: I1101 01:00:21.784718 2099 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9f616821c35ae586a1973da8f00f197e-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-9d78d981c4\" (UID: \"9f616821c35ae586a1973da8f00f197e\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.841460 kubelet[2099]: I1101 01:00:21.841425 2099 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:21.841846 kubelet[2099]: E1101 01:00:21.841805 2099 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.4.8:6443/api/v1/nodes\": dial tcp 10.200.4.8:6443: connect: connection refused" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:22.017838 env[1425]: time="2025-11-01T01:00:22.017699209Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-9d78d981c4,Uid:c2613e7bbc5a280f46aa69907651e98f,Namespace:kube-system,Attempt:0,}" Nov 1 01:00:22.022886 env[1425]: time="2025-11-01T01:00:22.022835379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-9d78d981c4,Uid:89ccc5e7738357fab10fb9a329cc2122,Namespace:kube-system,Attempt:0,}" Nov 1 01:00:22.027469 env[1425]: time="2025-11-01T01:00:22.027427731Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-9d78d981c4,Uid:9f616821c35ae586a1973da8f00f197e,Namespace:kube-system,Attempt:0,}" Nov 1 01:00:22.093622 kubelet[2099]: E1101 01:00:22.093582 2099 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.4.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-9d78d981c4?timeout=10s\": dial tcp 10.200.4.8:6443: connect: connection refused" interval="800ms" Nov 1 01:00:22.157300 kubelet[2099]: E1101 01:00:22.157163 2099 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.4.8:6443/api/v1/namespaces/default/events\": dial tcp 10.200.4.8:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-9d78d981c4.1873bc367c0e3a2c default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-9d78d981c4,UID:ci-3510.3.8-n-9d78d981c4,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-9d78d981c4,},FirstTimestamp:2025-11-01 01:00:21.427558956 +0000 UTC m=+1.400154435,LastTimestamp:2025-11-01 01:00:21.427558956 +0000 UTC m=+1.400154435,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-9d78d981c4,}" Nov 1 01:00:22.243812 kubelet[2099]: I1101 01:00:22.243771 2099 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:22.244187 kubelet[2099]: E1101 01:00:22.244152 2099 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.4.8:6443/api/v1/nodes\": dial tcp 10.200.4.8:6443: connect: connection refused" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:22.519607 kubelet[2099]: W1101 01:00:22.519566 2099 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.4.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.4.8:6443: connect: connection refused Nov 1 01:00:22.519969 kubelet[2099]: E1101 01:00:22.519616 2099 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.4.8:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:22.644532 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1582119213.mount: Deactivated successfully. Nov 1 01:00:22.695192 env[1425]: time="2025-11-01T01:00:22.695133681Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.698879 env[1425]: time="2025-11-01T01:00:22.698837503Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.707753 kubelet[2099]: W1101 01:00:22.707697 2099 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.4.8:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.4.8:6443: connect: connection refused Nov 1 01:00:22.707862 kubelet[2099]: E1101 01:00:22.707766 2099 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.4.8:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:22.709316 env[1425]: time="2025-11-01T01:00:22.709284350Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.713236 env[1425]: time="2025-11-01T01:00:22.713201880Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.715875 env[1425]: time="2025-11-01T01:00:22.715841067Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.718515 env[1425]: time="2025-11-01T01:00:22.718484255Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.722437 env[1425]: time="2025-11-01T01:00:22.722405185Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.725237 env[1425]: time="2025-11-01T01:00:22.725204778Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.731141 env[1425]: time="2025-11-01T01:00:22.731107174Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.733717 env[1425]: time="2025-11-01T01:00:22.733685659Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.742030 env[1425]: time="2025-11-01T01:00:22.741998935Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.751921 env[1425]: time="2025-11-01T01:00:22.751886463Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:22.805185 env[1425]: time="2025-11-01T01:00:22.803067161Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:00:22.805185 env[1425]: time="2025-11-01T01:00:22.803110962Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:00:22.805185 env[1425]: time="2025-11-01T01:00:22.803140963Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:00:22.805185 env[1425]: time="2025-11-01T01:00:22.803303369Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0785acdec1c9bf88381357de0eb2fe9b3f1590d7d13a91478e72e063c379beb4 pid=2140 runtime=io.containerd.runc.v2 Nov 1 01:00:22.821490 env[1425]: time="2025-11-01T01:00:22.821421370Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:00:22.821705 env[1425]: time="2025-11-01T01:00:22.821464371Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:00:22.821705 env[1425]: time="2025-11-01T01:00:22.821477572Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:00:22.827381 env[1425]: time="2025-11-01T01:00:22.823236530Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6673de7a68ec4c17cf8453150746e9695e53aa3e339c70672c5dec1151bf3127 pid=2158 runtime=io.containerd.runc.v2 Nov 1 01:00:22.834818 systemd[1]: Started cri-containerd-0785acdec1c9bf88381357de0eb2fe9b3f1590d7d13a91478e72e063c379beb4.scope. Nov 1 01:00:22.845775 env[1425]: time="2025-11-01T01:00:22.845705375Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:00:22.845988 env[1425]: time="2025-11-01T01:00:22.845959284Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:00:22.846133 env[1425]: time="2025-11-01T01:00:22.846107189Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:00:22.846476 env[1425]: time="2025-11-01T01:00:22.846437900Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e678de1a3c57080d067d6e8e9a599a74692472bce0589f7efb1275eb30373d71 pid=2181 runtime=io.containerd.runc.v2 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.854000 audit: BPF prog-id=62 op=LOAD Nov 1 01:00:22.855000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.855000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2140 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383561636465633163396266383833383133353764653065623266 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2140 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383561636465633163396266383833383133353764653065623266 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.856000 audit: BPF prog-id=63 op=LOAD Nov 1 01:00:22.856000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00021aec0 items=0 ppid=2140 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383561636465633163396266383833383133353764653065623266 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.857000 audit: BPF prog-id=64 op=LOAD Nov 1 01:00:22.857000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00021af08 items=0 ppid=2140 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383561636465633163396266383833383133353764653065623266 Nov 1 01:00:22.858000 audit: BPF prog-id=64 op=UNLOAD Nov 1 01:00:22.858000 audit: BPF prog-id=63 op=UNLOAD Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { perfmon } for pid=2151 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit[2151]: AVC avc: denied { bpf } for pid=2151 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.858000 audit: BPF prog-id=65 op=LOAD Nov 1 01:00:22.858000 audit[2151]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00021b318 items=0 ppid=2140 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383561636465633163396266383833383133353764653065623266 Nov 1 01:00:22.891413 systemd[1]: Started cri-containerd-6673de7a68ec4c17cf8453150746e9695e53aa3e339c70672c5dec1151bf3127.scope. Nov 1 01:00:22.894425 kubelet[2099]: E1101 01:00:22.894364 2099 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.4.8:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-9d78d981c4?timeout=10s\": dial tcp 10.200.4.8:6443: connect: connection refused" interval="1.6s" Nov 1 01:00:22.901133 systemd[1]: Started cri-containerd-e678de1a3c57080d067d6e8e9a599a74692472bce0589f7efb1275eb30373d71.scope. Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.914000 audit: BPF prog-id=66 op=LOAD Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2158 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373364653761363865633463313763663834353331353037343665 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2158 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373364653761363865633463313763663834353331353037343665 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.915000 audit: BPF prog-id=67 op=LOAD Nov 1 01:00:22.915000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000220f20 items=0 ppid=2158 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373364653761363865633463313763663834353331353037343665 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit: BPF prog-id=68 op=LOAD Nov 1 01:00:22.916000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000220f68 items=0 ppid=2158 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373364653761363865633463313763663834353331353037343665 Nov 1 01:00:22.916000 audit: BPF prog-id=68 op=UNLOAD Nov 1 01:00:22.916000 audit: BPF prog-id=67 op=UNLOAD Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.916000 audit: BPF prog-id=69 op=LOAD Nov 1 01:00:22.916000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000221378 items=0 ppid=2158 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373364653761363865633463313763663834353331353037343665 Nov 1 01:00:22.918752 env[1425]: time="2025-11-01T01:00:22.918703897Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-9d78d981c4,Uid:89ccc5e7738357fab10fb9a329cc2122,Namespace:kube-system,Attempt:0,} returns sandbox id \"0785acdec1c9bf88381357de0eb2fe9b3f1590d7d13a91478e72e063c379beb4\"" Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.930000 audit: BPF prog-id=70 op=LOAD Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2181 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373864653161336335373038306430363764366538653961353939 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2181 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373864653161336335373038306430363764366538653961353939 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit: BPF prog-id=71 op=LOAD Nov 1 01:00:22.931000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000096350 items=0 ppid=2181 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373864653161336335373038306430363764366538653961353939 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit: BPF prog-id=72 op=LOAD Nov 1 01:00:22.931000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000096398 items=0 ppid=2181 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373864653161336335373038306430363764366538653961353939 Nov 1 01:00:22.931000 audit: BPF prog-id=72 op=UNLOAD Nov 1 01:00:22.931000 audit: BPF prog-id=71 op=UNLOAD Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:22.931000 audit: BPF prog-id=73 op=LOAD Nov 1 01:00:22.931000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000967a8 items=0 ppid=2181 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:22.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373864653161336335373038306430363764366538653961353939 Nov 1 01:00:22.940722 env[1425]: time="2025-11-01T01:00:22.940684226Z" level=info msg="CreateContainer within sandbox \"0785acdec1c9bf88381357de0eb2fe9b3f1590d7d13a91478e72e063c379beb4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 01:00:22.968676 env[1425]: time="2025-11-01T01:00:22.968630053Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-9d78d981c4,Uid:c2613e7bbc5a280f46aa69907651e98f,Namespace:kube-system,Attempt:0,} returns sandbox id \"e678de1a3c57080d067d6e8e9a599a74692472bce0589f7efb1275eb30373d71\"" Nov 1 01:00:22.975908 env[1425]: time="2025-11-01T01:00:22.975871793Z" level=info msg="CreateContainer within sandbox \"e678de1a3c57080d067d6e8e9a599a74692472bce0589f7efb1275eb30373d71\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 01:00:22.978734 env[1425]: time="2025-11-01T01:00:22.978690887Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-9d78d981c4,Uid:9f616821c35ae586a1973da8f00f197e,Namespace:kube-system,Attempt:0,} returns sandbox id \"6673de7a68ec4c17cf8453150746e9695e53aa3e339c70672c5dec1151bf3127\"" Nov 1 01:00:22.980209 kubelet[2099]: W1101 01:00:22.980135 2099 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.4.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.4.8:6443: connect: connection refused Nov 1 01:00:22.980310 kubelet[2099]: E1101 01:00:22.980227 2099 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.4.8:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:22.981185 env[1425]: time="2025-11-01T01:00:22.981152368Z" level=info msg="CreateContainer within sandbox \"6673de7a68ec4c17cf8453150746e9695e53aa3e339c70672c5dec1151bf3127\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 01:00:22.997187 env[1425]: time="2025-11-01T01:00:22.997132298Z" level=info msg="CreateContainer within sandbox \"0785acdec1c9bf88381357de0eb2fe9b3f1590d7d13a91478e72e063c379beb4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"4287927cd4244ddc5f5c50a32eb12637caedc1df4954df7cc833864b770c94a4\"" Nov 1 01:00:22.998491 env[1425]: time="2025-11-01T01:00:22.998461142Z" level=info msg="StartContainer for \"4287927cd4244ddc5f5c50a32eb12637caedc1df4954df7cc833864b770c94a4\"" Nov 1 01:00:23.017001 systemd[1]: Started cri-containerd-4287927cd4244ddc5f5c50a32eb12637caedc1df4954df7cc833864b770c94a4.scope. Nov 1 01:00:23.022723 kubelet[2099]: W1101 01:00:23.022570 2099 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.4.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-9d78d981c4&limit=500&resourceVersion=0": dial tcp 10.200.4.8:6443: connect: connection refused Nov 1 01:00:23.022723 kubelet[2099]: E1101 01:00:23.022667 2099 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.4.8:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-9d78d981c4&limit=500&resourceVersion=0\": dial tcp 10.200.4.8:6443: connect: connection refused" logger="UnhandledError" Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.035000 audit: BPF prog-id=74 op=LOAD Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2140 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432383739323763643432343464646335663563353061333265623132 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2140 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432383739323763643432343464646335663563353061333265623132 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit: BPF prog-id=75 op=LOAD Nov 1 01:00:23.037000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002967e0 items=0 ppid=2140 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432383739323763643432343464646335663563353061333265623132 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.037000 audit: BPF prog-id=76 op=LOAD Nov 1 01:00:23.037000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000296828 items=0 ppid=2140 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432383739323763643432343464646335663563353061333265623132 Nov 1 01:00:23.038000 audit: BPF prog-id=76 op=UNLOAD Nov 1 01:00:23.038000 audit: BPF prog-id=75 op=UNLOAD Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { perfmon } for pid=2264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit[2264]: AVC avc: denied { bpf } for pid=2264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.038000 audit: BPF prog-id=77 op=LOAD Nov 1 01:00:23.038000 audit[2264]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000296c38 items=0 ppid=2140 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432383739323763643432343464646335663563353061333265623132 Nov 1 01:00:23.046764 kubelet[2099]: I1101 01:00:23.046410 2099 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:23.046877 kubelet[2099]: E1101 01:00:23.046837 2099 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.4.8:6443/api/v1/nodes\": dial tcp 10.200.4.8:6443: connect: connection refused" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:23.053245 env[1425]: time="2025-11-01T01:00:23.053195116Z" level=info msg="CreateContainer within sandbox \"6673de7a68ec4c17cf8453150746e9695e53aa3e339c70672c5dec1151bf3127\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"3b5fe8dbffd66c8482b843e51f8118c1f4b0d25af15905ca9097d9031e840bc2\"" Nov 1 01:00:23.053768 env[1425]: time="2025-11-01T01:00:23.053748234Z" level=info msg="StartContainer for \"3b5fe8dbffd66c8482b843e51f8118c1f4b0d25af15905ca9097d9031e840bc2\"" Nov 1 01:00:23.067576 env[1425]: time="2025-11-01T01:00:23.066708253Z" level=info msg="CreateContainer within sandbox \"e678de1a3c57080d067d6e8e9a599a74692472bce0589f7efb1275eb30373d71\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"a838c5952541fb213c6a78441d15ac08b54f33f7223d7600d3fb861d07131576\"" Nov 1 01:00:23.072829 env[1425]: time="2025-11-01T01:00:23.072795950Z" level=info msg="StartContainer for \"a838c5952541fb213c6a78441d15ac08b54f33f7223d7600d3fb861d07131576\"" Nov 1 01:00:23.083293 systemd[1]: Started cri-containerd-3b5fe8dbffd66c8482b843e51f8118c1f4b0d25af15905ca9097d9031e840bc2.scope. Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit: BPF prog-id=78 op=LOAD Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2158 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362356665386462666664363663383438326238343365353166383131 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2158 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362356665386462666664363663383438326238343365353166383131 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit: BPF prog-id=79 op=LOAD Nov 1 01:00:23.103000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000edb80 items=0 ppid=2158 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362356665386462666664363663383438326238343365353166383131 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.103000 audit: BPF prog-id=80 op=LOAD Nov 1 01:00:23.103000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000edbc8 items=0 ppid=2158 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362356665386462666664363663383438326238343365353166383131 Nov 1 01:00:23.104000 audit: BPF prog-id=80 op=UNLOAD Nov 1 01:00:23.104000 audit: BPF prog-id=79 op=UNLOAD Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.104000 audit: BPF prog-id=81 op=LOAD Nov 1 01:00:23.104000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000edfd8 items=0 ppid=2158 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362356665386462666664363663383438326238343365353166383131 Nov 1 01:00:23.109319 env[1425]: time="2025-11-01T01:00:23.109274231Z" level=info msg="StartContainer for \"4287927cd4244ddc5f5c50a32eb12637caedc1df4954df7cc833864b770c94a4\" returns successfully" Nov 1 01:00:23.114145 systemd[1]: Started cri-containerd-a838c5952541fb213c6a78441d15ac08b54f33f7223d7600d3fb861d07131576.scope. Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.167000 audit: BPF prog-id=82 op=LOAD Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2181 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138333863353935323534316662323133633661373834343164313561 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2181 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138333863353935323534316662323133633661373834343164313561 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit: BPF prog-id=83 op=LOAD Nov 1 01:00:23.168000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ec980 items=0 ppid=2181 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138333863353935323534316662323133633661373834343164313561 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit: BPF prog-id=84 op=LOAD Nov 1 01:00:23.168000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ec9c8 items=0 ppid=2181 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138333863353935323534316662323133633661373834343164313561 Nov 1 01:00:23.168000 audit: BPF prog-id=84 op=UNLOAD Nov 1 01:00:23.168000 audit: BPF prog-id=83 op=UNLOAD Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:23.168000 audit: BPF prog-id=85 op=LOAD Nov 1 01:00:23.168000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ecdd8 items=0 ppid=2181 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:23.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138333863353935323534316662323133633661373834343164313561 Nov 1 01:00:23.181162 env[1425]: time="2025-11-01T01:00:23.181101656Z" level=info msg="StartContainer for \"3b5fe8dbffd66c8482b843e51f8118c1f4b0d25af15905ca9097d9031e840bc2\" returns successfully" Nov 1 01:00:23.213762 env[1425]: time="2025-11-01T01:00:23.213686511Z" level=info msg="StartContainer for \"a838c5952541fb213c6a78441d15ac08b54f33f7223d7600d3fb861d07131576\" returns successfully" Nov 1 01:00:23.609500 kubelet[2099]: E1101 01:00:23.609472 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:23.612380 kubelet[2099]: E1101 01:00:23.612355 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:23.616182 kubelet[2099]: E1101 01:00:23.616164 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:24.617249 kubelet[2099]: E1101 01:00:24.617220 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:24.618168 kubelet[2099]: E1101 01:00:24.618150 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:24.648722 kubelet[2099]: I1101 01:00:24.648691 2099 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:24.803481 kernel: kauditd_printk_skb: 622 callbacks suppressed Nov 1 01:00:24.803638 kernel: audit: type=1400 audit(1761958824.779:536): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:24.779000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:24.827801 kernel: audit: type=1300 audit(1761958824.779:536): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005d2ed0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:24.779000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005d2ed0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:24.847374 kernel: audit: type=1327 audit(1761958824.779:536): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:24.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:24.865815 kernel: audit: type=1400 audit(1761958824.779:537): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:24.779000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:24.891862 kernel: audit: type=1300 audit(1761958824.779:537): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000392c00 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:24.779000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000392c00 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:24.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:24.912354 kernel: audit: type=1327 audit(1761958824.779:537): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:25.375000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:25.375000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c00666e9c0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:00:25.410941 kernel: audit: type=1400 audit(1761958825.375:538): avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:25.411075 kernel: audit: type=1300 audit(1761958825.375:538): arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c00666e9c0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:00:25.411112 kernel: audit: type=1327 audit(1761958825.375:538): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:00:25.375000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:00:25.379000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:25.379000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c007a4ea00 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:00:25.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:00:25.448356 kernel: audit: type=1400 audit(1761958825.379:539): avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:25.445000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7416 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:25.445000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c00666f170 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:00:25.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:00:25.447000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7410 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:25.447000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00666f560 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:00:25.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:00:25.451000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:25.451000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0069cc6a0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:00:25.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:00:25.451000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:25.451000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00424a360 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:00:25.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:00:25.561088 kubelet[2099]: E1101 01:00:25.561042 2099 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:25.617845 kubelet[2099]: E1101 01:00:25.617805 2099 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:25.708979 kubelet[2099]: I1101 01:00:25.708940 2099 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:25.709204 kubelet[2099]: E1101 01:00:25.709184 2099 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ci-3510.3.8-n-9d78d981c4\": node \"ci-3510.3.8-n-9d78d981c4\" not found" Nov 1 01:00:25.783030 kubelet[2099]: I1101 01:00:25.782985 2099 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:25.850294 kubelet[2099]: E1101 01:00:25.850249 2099 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:25.850294 kubelet[2099]: I1101 01:00:25.850293 2099 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:25.852264 kubelet[2099]: E1101 01:00:25.852229 2099 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-9d78d981c4\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:25.852264 kubelet[2099]: I1101 01:00:25.852257 2099 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:25.853689 kubelet[2099]: E1101 01:00:25.853663 2099 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:26.421367 kubelet[2099]: I1101 01:00:26.421317 2099 apiserver.go:52] "Watching apiserver" Nov 1 01:00:26.464429 kubelet[2099]: I1101 01:00:26.464386 2099 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:26.475560 kubelet[2099]: W1101 01:00:26.475531 2099 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 01:00:26.482230 kubelet[2099]: I1101 01:00:26.482201 2099 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 01:00:27.197150 kubelet[2099]: I1101 01:00:27.197121 2099 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:27.205542 kubelet[2099]: W1101 01:00:27.205511 2099 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 01:00:28.753485 systemd[1]: Reloading. Nov 1 01:00:28.836055 /usr/lib/systemd/system-generators/torcx-generator[2392]: time="2025-11-01T01:00:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 01:00:28.836095 /usr/lib/systemd/system-generators/torcx-generator[2392]: time="2025-11-01T01:00:28Z" level=info msg="torcx already run" Nov 1 01:00:28.944311 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 01:00:28.944355 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 01:00:28.960995 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.043000 audit: BPF prog-id=86 op=LOAD Nov 1 01:00:29.043000 audit: BPF prog-id=78 op=UNLOAD Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.044000 audit: BPF prog-id=87 op=LOAD Nov 1 01:00:29.044000 audit: BPF prog-id=47 op=UNLOAD Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.045000 audit: BPF prog-id=88 op=LOAD Nov 1 01:00:29.045000 audit: BPF prog-id=74 op=UNLOAD Nov 1 01:00:29.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.047000 audit: BPF prog-id=89 op=LOAD Nov 1 01:00:29.047000 audit: BPF prog-id=82 op=UNLOAD Nov 1 01:00:29.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit: BPF prog-id=90 op=LOAD Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.048000 audit: BPF prog-id=91 op=LOAD Nov 1 01:00:29.048000 audit: BPF prog-id=48 op=UNLOAD Nov 1 01:00:29.048000 audit: BPF prog-id=49 op=UNLOAD Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit: BPF prog-id=92 op=LOAD Nov 1 01:00:29.050000 audit: BPF prog-id=50 op=UNLOAD Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit: BPF prog-id=93 op=LOAD Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.050000 audit: BPF prog-id=94 op=LOAD Nov 1 01:00:29.050000 audit: BPF prog-id=51 op=UNLOAD Nov 1 01:00:29.050000 audit: BPF prog-id=52 op=UNLOAD Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit: BPF prog-id=95 op=LOAD Nov 1 01:00:29.052000 audit: BPF prog-id=53 op=UNLOAD Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit: BPF prog-id=96 op=LOAD Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.052000 audit: BPF prog-id=97 op=LOAD Nov 1 01:00:29.052000 audit: BPF prog-id=54 op=UNLOAD Nov 1 01:00:29.052000 audit: BPF prog-id=55 op=UNLOAD Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.054000 audit: BPF prog-id=98 op=LOAD Nov 1 01:00:29.054000 audit: BPF prog-id=56 op=UNLOAD Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.055000 audit: BPF prog-id=99 op=LOAD Nov 1 01:00:29.055000 audit: BPF prog-id=57 op=UNLOAD Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.057000 audit: BPF prog-id=100 op=LOAD Nov 1 01:00:29.057000 audit: BPF prog-id=62 op=UNLOAD Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.059000 audit: BPF prog-id=101 op=LOAD Nov 1 01:00:29.059000 audit: BPF prog-id=70 op=UNLOAD Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit: BPF prog-id=102 op=LOAD Nov 1 01:00:29.061000 audit: BPF prog-id=58 op=UNLOAD Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit: BPF prog-id=103 op=LOAD Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit: BPF prog-id=104 op=LOAD Nov 1 01:00:29.061000 audit: BPF prog-id=59 op=UNLOAD Nov 1 01:00:29.061000 audit: BPF prog-id=60 op=UNLOAD Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.062000 audit: BPF prog-id=105 op=LOAD Nov 1 01:00:29.062000 audit: BPF prog-id=61 op=UNLOAD Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.063000 audit: BPF prog-id=106 op=LOAD Nov 1 01:00:29.063000 audit: BPF prog-id=66 op=UNLOAD Nov 1 01:00:29.080061 systemd[1]: Stopping kubelet.service... Nov 1 01:00:29.104650 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 01:00:29.104876 systemd[1]: Stopped kubelet.service. Nov 1 01:00:29.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:29.104946 systemd[1]: kubelet.service: Consumed 1.017s CPU time. Nov 1 01:00:29.106892 systemd[1]: Starting kubelet.service... Nov 1 01:00:29.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:29.374128 systemd[1]: Started kubelet.service. Nov 1 01:00:29.426361 kubelet[2460]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 01:00:29.426773 kubelet[2460]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 01:00:29.426842 kubelet[2460]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 01:00:29.427089 kubelet[2460]: I1101 01:00:29.427040 2460 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 01:00:29.434449 kubelet[2460]: I1101 01:00:29.434418 2460 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 01:00:29.434449 kubelet[2460]: I1101 01:00:29.434440 2460 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 01:00:29.434709 kubelet[2460]: I1101 01:00:29.434689 2460 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 01:00:29.435771 kubelet[2460]: I1101 01:00:29.435742 2460 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Nov 1 01:00:29.437568 kubelet[2460]: I1101 01:00:29.437547 2460 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 01:00:29.442217 kubelet[2460]: E1101 01:00:29.442184 2460 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 01:00:29.442217 kubelet[2460]: I1101 01:00:29.442208 2460 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 01:00:29.447469 kubelet[2460]: I1101 01:00:29.447447 2460 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 01:00:29.447714 kubelet[2460]: I1101 01:00:29.447687 2460 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 01:00:29.448030 kubelet[2460]: I1101 01:00:29.447717 2460 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-9d78d981c4","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 01:00:29.448162 kubelet[2460]: I1101 01:00:29.448042 2460 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 01:00:29.448162 kubelet[2460]: I1101 01:00:29.448058 2460 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 01:00:29.448162 kubelet[2460]: I1101 01:00:29.448110 2460 state_mem.go:36] "Initialized new in-memory state store" Nov 1 01:00:29.448451 kubelet[2460]: I1101 01:00:29.448256 2460 kubelet.go:446] "Attempting to sync node with API server" Nov 1 01:00:29.448451 kubelet[2460]: I1101 01:00:29.448278 2460 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 01:00:29.448451 kubelet[2460]: I1101 01:00:29.448300 2460 kubelet.go:352] "Adding apiserver pod source" Nov 1 01:00:29.448451 kubelet[2460]: I1101 01:00:29.448364 2460 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 01:00:29.450930 kubelet[2460]: I1101 01:00:29.450909 2460 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 01:00:29.455000 audit[2460]: AVC avc: denied { mac_admin } for pid=2460 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.455000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 01:00:29.455000 audit[2460]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0000599b0 a1=c0008655d8 a2=c0000598f0 a3=25 items=0 ppid=1 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:29.455000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 01:00:29.455000 audit[2460]: AVC avc: denied { mac_admin } for pid=2460 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.455000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 01:00:29.455000 audit[2460]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00015a380 a1=c0008655f0 a2=c000059bf0 a3=25 items=0 ppid=1 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:29.455000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 01:00:29.457722 kubelet[2460]: I1101 01:00:29.454273 2460 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 01:00:29.457722 kubelet[2460]: I1101 01:00:29.454728 2460 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 01:00:29.457722 kubelet[2460]: I1101 01:00:29.454757 2460 server.go:1287] "Started kubelet" Nov 1 01:00:29.457722 kubelet[2460]: I1101 01:00:29.456903 2460 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 01:00:29.457722 kubelet[2460]: I1101 01:00:29.456948 2460 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 01:00:29.457722 kubelet[2460]: I1101 01:00:29.456984 2460 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 01:00:29.464568 kubelet[2460]: I1101 01:00:29.464539 2460 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 01:00:29.465639 kubelet[2460]: I1101 01:00:29.465560 2460 server.go:479] "Adding debug handlers to kubelet server" Nov 1 01:00:29.467188 kubelet[2460]: I1101 01:00:29.467136 2460 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 01:00:29.471181 kubelet[2460]: I1101 01:00:29.467393 2460 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 01:00:29.471181 kubelet[2460]: I1101 01:00:29.467623 2460 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 01:00:29.471181 kubelet[2460]: I1101 01:00:29.469599 2460 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 01:00:29.471181 kubelet[2460]: E1101 01:00:29.469837 2460 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-9d78d981c4\" not found" Nov 1 01:00:29.471749 kubelet[2460]: I1101 01:00:29.471728 2460 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 01:00:29.471867 kubelet[2460]: I1101 01:00:29.471855 2460 reconciler.go:26] "Reconciler: start to sync state" Nov 1 01:00:29.475102 kubelet[2460]: I1101 01:00:29.473686 2460 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 01:00:29.475900 kubelet[2460]: I1101 01:00:29.475877 2460 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 01:00:29.475978 kubelet[2460]: I1101 01:00:29.475916 2460 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 01:00:29.475978 kubelet[2460]: I1101 01:00:29.475935 2460 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 01:00:29.475978 kubelet[2460]: I1101 01:00:29.475944 2460 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 01:00:29.476106 kubelet[2460]: E1101 01:00:29.475990 2460 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 01:00:29.487226 kubelet[2460]: I1101 01:00:29.487206 2460 factory.go:221] Registration of the containerd container factory successfully Nov 1 01:00:29.487226 kubelet[2460]: I1101 01:00:29.487223 2460 factory.go:221] Registration of the systemd container factory successfully Nov 1 01:00:29.487384 kubelet[2460]: I1101 01:00:29.487303 2460 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 01:00:29.536594 kubelet[2460]: I1101 01:00:29.536557 2460 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 01:00:29.536594 kubelet[2460]: I1101 01:00:29.536576 2460 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 01:00:29.536594 kubelet[2460]: I1101 01:00:29.536596 2460 state_mem.go:36] "Initialized new in-memory state store" Nov 1 01:00:29.536824 kubelet[2460]: I1101 01:00:29.536770 2460 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 01:00:29.536824 kubelet[2460]: I1101 01:00:29.536784 2460 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 01:00:29.536824 kubelet[2460]: I1101 01:00:29.536808 2460 policy_none.go:49] "None policy: Start" Nov 1 01:00:29.536824 kubelet[2460]: I1101 01:00:29.536820 2460 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 01:00:29.536992 kubelet[2460]: I1101 01:00:29.536832 2460 state_mem.go:35] "Initializing new in-memory state store" Nov 1 01:00:29.536992 kubelet[2460]: I1101 01:00:29.536960 2460 state_mem.go:75] "Updated machine memory state" Nov 1 01:00:29.541417 kubelet[2460]: I1101 01:00:29.541395 2460 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 01:00:29.540000 audit[2460]: AVC avc: denied { mac_admin } for pid=2460 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:29.540000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 01:00:29.540000 audit[2460]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bfa0f0 a1=c001007d40 a2=c000bfa0c0 a3=25 items=0 ppid=1 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:29.540000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 01:00:29.542671 kubelet[2460]: I1101 01:00:29.542646 2460 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 01:00:29.543049 kubelet[2460]: I1101 01:00:29.543034 2460 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 01:00:29.544019 kubelet[2460]: I1101 01:00:29.543980 2460 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 01:00:29.544827 kubelet[2460]: I1101 01:00:29.544801 2460 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 01:00:29.545723 kubelet[2460]: E1101 01:00:29.545706 2460 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 01:00:29.577168 kubelet[2460]: I1101 01:00:29.577125 2460 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.577367 kubelet[2460]: I1101 01:00:29.577162 2460 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.577547 kubelet[2460]: I1101 01:00:29.577247 2460 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.586608 kubelet[2460]: W1101 01:00:29.586590 2460 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 01:00:29.594230 kubelet[2460]: W1101 01:00:29.593699 2460 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 01:00:29.594230 kubelet[2460]: E1101 01:00:29.593832 2460 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.594230 kubelet[2460]: W1101 01:00:29.593745 2460 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 01:00:29.594230 kubelet[2460]: E1101 01:00:29.593913 2460 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.647918 kubelet[2460]: I1101 01:00:29.647815 2460 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.661347 kubelet[2460]: I1101 01:00:29.661302 2460 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.661479 kubelet[2460]: I1101 01:00:29.661389 2460 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773318 kubelet[2460]: I1101 01:00:29.773269 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c2613e7bbc5a280f46aa69907651e98f-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" (UID: \"c2613e7bbc5a280f46aa69907651e98f\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773574 kubelet[2460]: I1101 01:00:29.773547 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c2613e7bbc5a280f46aa69907651e98f-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" (UID: \"c2613e7bbc5a280f46aa69907651e98f\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773677 kubelet[2460]: I1101 01:00:29.773586 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773677 kubelet[2460]: I1101 01:00:29.773622 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773677 kubelet[2460]: I1101 01:00:29.773649 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9f616821c35ae586a1973da8f00f197e-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-9d78d981c4\" (UID: \"9f616821c35ae586a1973da8f00f197e\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773861 kubelet[2460]: I1101 01:00:29.773684 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c2613e7bbc5a280f46aa69907651e98f-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" (UID: \"c2613e7bbc5a280f46aa69907651e98f\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773861 kubelet[2460]: I1101 01:00:29.773710 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773861 kubelet[2460]: I1101 01:00:29.773735 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:29.773861 kubelet[2460]: I1101 01:00:29.773760 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/89ccc5e7738357fab10fb9a329cc2122-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" (UID: \"89ccc5e7738357fab10fb9a329cc2122\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:30.461606 kubelet[2460]: I1101 01:00:30.461556 2460 apiserver.go:52] "Watching apiserver" Nov 1 01:00:30.473724 kubelet[2460]: I1101 01:00:30.472234 2460 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 01:00:30.516650 kubelet[2460]: I1101 01:00:30.516624 2460 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:30.517071 kubelet[2460]: I1101 01:00:30.517052 2460 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:30.539933 kubelet[2460]: W1101 01:00:30.539908 2460 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 01:00:30.540070 kubelet[2460]: E1101 01:00:30.539969 2460 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-9d78d981c4\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:30.541482 kubelet[2460]: W1101 01:00:30.541465 2460 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 01:00:30.541574 kubelet[2460]: E1101 01:00:30.541509 2460 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-9d78d981c4\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" Nov 1 01:00:30.568550 kubelet[2460]: I1101 01:00:30.568464 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-9d78d981c4" podStartSLOduration=3.568442725 podStartE2EDuration="3.568442725s" podCreationTimestamp="2025-11-01 01:00:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 01:00:30.566684577 +0000 UTC m=+1.185735117" watchObservedRunningTime="2025-11-01 01:00:30.568442725 +0000 UTC m=+1.187493265" Nov 1 01:00:30.568938 kubelet[2460]: I1101 01:00:30.568886 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-9d78d981c4" podStartSLOduration=1.568874137 podStartE2EDuration="1.568874137s" podCreationTimestamp="2025-11-01 01:00:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 01:00:30.552689193 +0000 UTC m=+1.171739633" watchObservedRunningTime="2025-11-01 01:00:30.568874137 +0000 UTC m=+1.187924677" Nov 1 01:00:30.605120 kubelet[2460]: I1101 01:00:30.605075 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-9d78d981c4" podStartSLOduration=4.60505683 podStartE2EDuration="4.60505683s" podCreationTimestamp="2025-11-01 01:00:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 01:00:30.586637024 +0000 UTC m=+1.205687564" watchObservedRunningTime="2025-11-01 01:00:30.60505683 +0000 UTC m=+1.224107370" Nov 1 01:00:32.454367 kernel: kauditd_printk_skb: 272 callbacks suppressed Nov 1 01:00:32.454539 kernel: audit: type=1400 audit(1761958832.441:793): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:32.441000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:32.442000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:32.477152 kernel: audit: type=1400 audit(1761958832.442:794): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:32.477258 kernel: audit: type=1300 audit(1761958832.442:794): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017d24c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:32.442000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017d24c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:32.514195 kernel: audit: type=1327 audit(1761958832.442:794): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:32.514325 kernel: audit: type=1400 audit(1761958832.443:795): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:32.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:32.443000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:32.443000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017d2500 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:32.552342 kernel: audit: type=1300 audit(1761958832.443:795): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017d2500 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:32.552472 kernel: audit: type=1327 audit(1761958832.443:795): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:32.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:32.443000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:32.587596 kernel: audit: type=1400 audit(1761958832.443:796): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:00:32.587720 kernel: audit: type=1300 audit(1761958832.443:796): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017d2540 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:32.443000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017d2540 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:32.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:32.624051 kernel: audit: type=1327 audit(1761958832.443:796): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:32.441000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001722b00 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:32.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:33.045000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=520971 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 01:00:33.045000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000deddc0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:00:33.045000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:00:33.801564 kubelet[2460]: I1101 01:00:33.801529 2460 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 01:00:33.802415 env[1425]: time="2025-11-01T01:00:33.802376926Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 01:00:33.802781 kubelet[2460]: I1101 01:00:33.802591 2460 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 01:00:34.071191 systemd[1]: Created slice kubepods-besteffort-pod900bc9b9_c08b_4721_be59_bf23a083c84e.slice. Nov 1 01:00:34.097878 kubelet[2460]: I1101 01:00:34.097844 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/900bc9b9-c08b-4721-be59-bf23a083c84e-kube-proxy\") pod \"kube-proxy-dszkf\" (UID: \"900bc9b9-c08b-4721-be59-bf23a083c84e\") " pod="kube-system/kube-proxy-dszkf" Nov 1 01:00:34.097878 kubelet[2460]: I1101 01:00:34.097877 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/900bc9b9-c08b-4721-be59-bf23a083c84e-xtables-lock\") pod \"kube-proxy-dszkf\" (UID: \"900bc9b9-c08b-4721-be59-bf23a083c84e\") " pod="kube-system/kube-proxy-dszkf" Nov 1 01:00:34.098124 kubelet[2460]: I1101 01:00:34.097900 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/900bc9b9-c08b-4721-be59-bf23a083c84e-lib-modules\") pod \"kube-proxy-dszkf\" (UID: \"900bc9b9-c08b-4721-be59-bf23a083c84e\") " pod="kube-system/kube-proxy-dszkf" Nov 1 01:00:34.098124 kubelet[2460]: I1101 01:00:34.097926 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jtjgp\" (UniqueName: \"kubernetes.io/projected/900bc9b9-c08b-4721-be59-bf23a083c84e-kube-api-access-jtjgp\") pod \"kube-proxy-dszkf\" (UID: \"900bc9b9-c08b-4721-be59-bf23a083c84e\") " pod="kube-system/kube-proxy-dszkf" Nov 1 01:00:34.203083 kubelet[2460]: E1101 01:00:34.203046 2460 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Nov 1 01:00:34.203083 kubelet[2460]: E1101 01:00:34.203080 2460 projected.go:194] Error preparing data for projected volume kube-api-access-jtjgp for pod kube-system/kube-proxy-dszkf: configmap "kube-root-ca.crt" not found Nov 1 01:00:34.203363 kubelet[2460]: E1101 01:00:34.203146 2460 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/900bc9b9-c08b-4721-be59-bf23a083c84e-kube-api-access-jtjgp podName:900bc9b9-c08b-4721-be59-bf23a083c84e nodeName:}" failed. No retries permitted until 2025-11-01 01:00:34.703124978 +0000 UTC m=+5.322175418 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-jtjgp" (UniqueName: "kubernetes.io/projected/900bc9b9-c08b-4721-be59-bf23a083c84e-kube-api-access-jtjgp") pod "kube-proxy-dszkf" (UID: "900bc9b9-c08b-4721-be59-bf23a083c84e") : configmap "kube-root-ca.crt" not found Nov 1 01:00:34.801920 kubelet[2460]: I1101 01:00:34.801877 2460 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 01:00:34.914313 systemd[1]: Created slice kubepods-besteffort-pode7c33363_511c_45a5_b3e8_5a2a74e22048.slice. Nov 1 01:00:34.978933 env[1425]: time="2025-11-01T01:00:34.978882514Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dszkf,Uid:900bc9b9-c08b-4721-be59-bf23a083c84e,Namespace:kube-system,Attempt:0,}" Nov 1 01:00:35.007926 kubelet[2460]: I1101 01:00:35.002813 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e7c33363-511c-45a5-b3e8-5a2a74e22048-var-lib-calico\") pod \"tigera-operator-7dcd859c48-mlhn9\" (UID: \"e7c33363-511c-45a5-b3e8-5a2a74e22048\") " pod="tigera-operator/tigera-operator-7dcd859c48-mlhn9" Nov 1 01:00:35.007926 kubelet[2460]: I1101 01:00:35.002865 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ctsx4\" (UniqueName: \"kubernetes.io/projected/e7c33363-511c-45a5-b3e8-5a2a74e22048-kube-api-access-ctsx4\") pod \"tigera-operator-7dcd859c48-mlhn9\" (UID: \"e7c33363-511c-45a5-b3e8-5a2a74e22048\") " pod="tigera-operator/tigera-operator-7dcd859c48-mlhn9" Nov 1 01:00:35.013767 env[1425]: time="2025-11-01T01:00:35.013682580Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:00:35.013899 env[1425]: time="2025-11-01T01:00:35.013780382Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:00:35.013899 env[1425]: time="2025-11-01T01:00:35.013809983Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:00:35.014107 env[1425]: time="2025-11-01T01:00:35.014068989Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/33bf4c5a2653d4438e6b6dba1d619210ef8eef23fabf590a3ae0d97f0c6dba16 pid=2510 runtime=io.containerd.runc.v2 Nov 1 01:00:35.027721 systemd[1]: Started cri-containerd-33bf4c5a2653d4438e6b6dba1d619210ef8eef23fabf590a3ae0d97f0c6dba16.scope. Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.051000 audit: BPF prog-id=107 op=LOAD Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2510 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333626634633561323635336434343338653662366462613164363139 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2510 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333626634633561323635336434343338653662366462613164363139 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit: BPF prog-id=108 op=LOAD Nov 1 01:00:35.052000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000293110 items=0 ppid=2510 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333626634633561323635336434343338653662366462613164363139 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit: BPF prog-id=109 op=LOAD Nov 1 01:00:35.052000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000293158 items=0 ppid=2510 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333626634633561323635336434343338653662366462613164363139 Nov 1 01:00:35.052000 audit: BPF prog-id=109 op=UNLOAD Nov 1 01:00:35.052000 audit: BPF prog-id=108 op=UNLOAD Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.052000 audit: BPF prog-id=110 op=LOAD Nov 1 01:00:35.052000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000293568 items=0 ppid=2510 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333626634633561323635336434343338653662366462613164363139 Nov 1 01:00:35.070507 env[1425]: time="2025-11-01T01:00:35.070455471Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dszkf,Uid:900bc9b9-c08b-4721-be59-bf23a083c84e,Namespace:kube-system,Attempt:0,} returns sandbox id \"33bf4c5a2653d4438e6b6dba1d619210ef8eef23fabf590a3ae0d97f0c6dba16\"" Nov 1 01:00:35.073607 env[1425]: time="2025-11-01T01:00:35.073571447Z" level=info msg="CreateContainer within sandbox \"33bf4c5a2653d4438e6b6dba1d619210ef8eef23fabf590a3ae0d97f0c6dba16\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 01:00:35.111937 env[1425]: time="2025-11-01T01:00:35.111879086Z" level=info msg="CreateContainer within sandbox \"33bf4c5a2653d4438e6b6dba1d619210ef8eef23fabf590a3ae0d97f0c6dba16\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"6225a3a7a29c08729ae1199ae851ad45fc6621543858997918dcf5a26aaa3790\"" Nov 1 01:00:35.112837 env[1425]: time="2025-11-01T01:00:35.112803109Z" level=info msg="StartContainer for \"6225a3a7a29c08729ae1199ae851ad45fc6621543858997918dcf5a26aaa3790\"" Nov 1 01:00:35.136558 systemd[1]: Started cri-containerd-6225a3a7a29c08729ae1199ae851ad45fc6621543858997918dcf5a26aaa3790.scope. Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fee242bab18 items=0 ppid=2510 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632323561336137613239633038373239616531313939616538353161 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit: BPF prog-id=111 op=LOAD Nov 1 01:00:35.154000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00028b838 items=0 ppid=2510 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632323561336137613239633038373239616531313939616538353161 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit: BPF prog-id=112 op=LOAD Nov 1 01:00:35.154000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00028b888 items=0 ppid=2510 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632323561336137613239633038373239616531313939616538353161 Nov 1 01:00:35.154000 audit: BPF prog-id=112 op=UNLOAD Nov 1 01:00:35.154000 audit: BPF prog-id=111 op=UNLOAD Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.154000 audit: BPF prog-id=113 op=LOAD Nov 1 01:00:35.154000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00028b918 items=0 ppid=2510 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632323561336137613239633038373239616531313939616538353161 Nov 1 01:00:35.173755 env[1425]: time="2025-11-01T01:00:35.173654300Z" level=info msg="StartContainer for \"6225a3a7a29c08729ae1199ae851ad45fc6621543858997918dcf5a26aaa3790\" returns successfully" Nov 1 01:00:35.218929 env[1425]: time="2025-11-01T01:00:35.218890009Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-mlhn9,Uid:e7c33363-511c-45a5-b3e8-5a2a74e22048,Namespace:tigera-operator,Attempt:0,}" Nov 1 01:00:35.256557 env[1425]: time="2025-11-01T01:00:35.256474230Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:00:35.256557 env[1425]: time="2025-11-01T01:00:35.256513231Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:00:35.256557 env[1425]: time="2025-11-01T01:00:35.256529131Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:00:35.257030 env[1425]: time="2025-11-01T01:00:35.256948941Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ad8952876dd3e56589550456ea24c8d65aec2c29d49526328e95c10cf95848c3 pid=2595 runtime=io.containerd.runc.v2 Nov 1 01:00:35.275090 systemd[1]: Started cri-containerd-ad8952876dd3e56589550456ea24c8d65aec2c29d49526328e95c10cf95848c3.scope. Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.297000 audit: BPF prog-id=114 op=LOAD Nov 1 01:00:35.298000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.298000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2595 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383935323837366464336535363538393535303435366561323463 Nov 1 01:00:35.298000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.298000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2595 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383935323837366464336535363538393535303435366561323463 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit: BPF prog-id=115 op=LOAD Nov 1 01:00:35.299000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000a1a10 items=0 ppid=2595 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383935323837366464336535363538393535303435366561323463 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.299000 audit: BPF prog-id=116 op=LOAD Nov 1 01:00:35.299000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000a1a58 items=0 ppid=2595 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383935323837366464336535363538393535303435366561323463 Nov 1 01:00:35.300000 audit: BPF prog-id=116 op=UNLOAD Nov 1 01:00:35.300000 audit: BPF prog-id=115 op=UNLOAD Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:35.300000 audit: BPF prog-id=117 op=LOAD Nov 1 01:00:35.300000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000a1e68 items=0 ppid=2595 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383935323837366464336535363538393535303435366561323463 Nov 1 01:00:35.340000 audit[2653]: NETFILTER_CFG table=mangle:45 family=10 entries=1 op=nft_register_chain pid=2653 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.340000 audit[2653]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff92b8a290 a2=0 a3=7fff92b8a27c items=0 ppid=2565 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.340000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 01:00:35.341000 audit[2652]: NETFILTER_CFG table=mangle:46 family=2 entries=1 op=nft_register_chain pid=2652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.341000 audit[2652]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2db0b1f0 a2=0 a3=7ffc2db0b1dc items=0 ppid=2565 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.341000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 01:00:35.346969 env[1425]: time="2025-11-01T01:00:35.346924446Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-mlhn9,Uid:e7c33363-511c-45a5-b3e8-5a2a74e22048,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"ad8952876dd3e56589550456ea24c8d65aec2c29d49526328e95c10cf95848c3\"" Nov 1 01:00:35.347000 audit[2657]: NETFILTER_CFG table=nat:47 family=10 entries=1 op=nft_register_chain pid=2657 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.349577 env[1425]: time="2025-11-01T01:00:35.349545511Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 01:00:35.347000 audit[2657]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe8ecc00c0 a2=0 a3=7ffe8ecc00ac items=0 ppid=2565 pid=2657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.347000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 01:00:35.350000 audit[2656]: NETFILTER_CFG table=nat:48 family=2 entries=1 op=nft_register_chain pid=2656 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.350000 audit[2656]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffedabc5b70 a2=0 a3=7ffedabc5b5c items=0 ppid=2565 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.350000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 01:00:35.353000 audit[2659]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2659 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.353000 audit[2658]: NETFILTER_CFG table=filter:50 family=10 entries=1 op=nft_register_chain pid=2658 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.353000 audit[2658]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff49aa58e0 a2=0 a3=7fff49aa58cc items=0 ppid=2565 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 01:00:35.353000 audit[2659]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdaec294d0 a2=0 a3=7ffdaec294bc items=0 ppid=2565 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.353000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 01:00:35.435000 audit[2660]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.435000 audit[2660]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe3df31b20 a2=0 a3=7ffe3df31b0c items=0 ppid=2565 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 01:00:35.439000 audit[2662]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2662 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.439000 audit[2662]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc000d0820 a2=0 a3=7ffc000d080c items=0 ppid=2565 pid=2662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.439000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 01:00:35.443000 audit[2665]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.443000 audit[2665]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffd1506c20 a2=0 a3=7fffd1506c0c items=0 ppid=2565 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 01:00:35.444000 audit[2666]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2666 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.444000 audit[2666]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff19b876c0 a2=0 a3=7fff19b876ac items=0 ppid=2565 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.444000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 01:00:35.446000 audit[2668]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2668 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.446000 audit[2668]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdfe5cdd10 a2=0 a3=7ffdfe5cdcfc items=0 ppid=2565 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 01:00:35.447000 audit[2669]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2669 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.447000 audit[2669]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe89fc4d00 a2=0 a3=7ffe89fc4cec items=0 ppid=2565 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.447000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 01:00:35.450000 audit[2671]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2671 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.450000 audit[2671]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffee61e3c70 a2=0 a3=7ffee61e3c5c items=0 ppid=2565 pid=2671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 01:00:35.454000 audit[2674]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.454000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdf6726780 a2=0 a3=7ffdf672676c items=0 ppid=2565 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 01:00:35.456000 audit[2675]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.456000 audit[2675]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffeec1dea0 a2=0 a3=7fffeec1de8c items=0 ppid=2565 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 01:00:35.459000 audit[2677]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.459000 audit[2677]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe1b61c040 a2=0 a3=7ffe1b61c02c items=0 ppid=2565 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.459000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 01:00:35.460000 audit[2678]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=2678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.460000 audit[2678]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6e6f1bb0 a2=0 a3=7ffe6e6f1b9c items=0 ppid=2565 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.460000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 01:00:35.463000 audit[2680]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_rule pid=2680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.463000 audit[2680]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffec6a8e00 a2=0 a3=7fffec6a8dec items=0 ppid=2565 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 01:00:35.466000 audit[2683]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_rule pid=2683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.466000 audit[2683]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe6e95d590 a2=0 a3=7ffe6e95d57c items=0 ppid=2565 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.466000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 01:00:35.470000 audit[2686]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_rule pid=2686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.470000 audit[2686]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd563508d0 a2=0 a3=7ffd563508bc items=0 ppid=2565 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.470000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 01:00:35.471000 audit[2687]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.471000 audit[2687]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdd8a89350 a2=0 a3=7ffdd8a8933c items=0 ppid=2565 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.471000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 01:00:35.474000 audit[2689]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.474000 audit[2689]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff1f00d760 a2=0 a3=7fff1f00d74c items=0 ppid=2565 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.474000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 01:00:35.479000 audit[2692]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_rule pid=2692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.479000 audit[2692]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffef9aa870 a2=0 a3=7fffef9aa85c items=0 ppid=2565 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.479000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 01:00:35.480000 audit[2693]: NETFILTER_CFG table=nat:68 family=2 entries=1 op=nft_register_chain pid=2693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.480000 audit[2693]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeadfeb0b0 a2=0 a3=7ffeadfeb09c items=0 ppid=2565 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.480000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 01:00:35.482000 audit[2695]: NETFILTER_CFG table=nat:69 family=2 entries=1 op=nft_register_rule pid=2695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 01:00:35.482000 audit[2695]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc27439870 a2=0 a3=7ffc2743985c items=0 ppid=2565 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.482000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 01:00:35.560972 kubelet[2460]: I1101 01:00:35.560918 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-dszkf" podStartSLOduration=1.56090149 podStartE2EDuration="1.56090149s" podCreationTimestamp="2025-11-01 01:00:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 01:00:35.544843997 +0000 UTC m=+6.163894437" watchObservedRunningTime="2025-11-01 01:00:35.56090149 +0000 UTC m=+6.179951930" Nov 1 01:00:35.659000 audit[2701]: NETFILTER_CFG table=filter:70 family=2 entries=8 op=nft_register_rule pid=2701 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:35.659000 audit[2701]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffde3cd4550 a2=0 a3=7ffde3cd453c items=0 ppid=2565 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.659000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:35.690000 audit[2701]: NETFILTER_CFG table=nat:71 family=2 entries=14 op=nft_register_chain pid=2701 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:35.690000 audit[2701]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffde3cd4550 a2=0 a3=7ffde3cd453c items=0 ppid=2565 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:35.692000 audit[2706]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2706 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.692000 audit[2706]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcde03e500 a2=0 a3=7ffcde03e4ec items=0 ppid=2565 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.692000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 01:00:35.696000 audit[2708]: NETFILTER_CFG table=filter:73 family=10 entries=2 op=nft_register_chain pid=2708 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.696000 audit[2708]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffff72ecc0 a2=0 a3=7fffff72ecac items=0 ppid=2565 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.696000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 01:00:35.700000 audit[2711]: NETFILTER_CFG table=filter:74 family=10 entries=2 op=nft_register_chain pid=2711 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.700000 audit[2711]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe4b3a0220 a2=0 a3=7ffe4b3a020c items=0 ppid=2565 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.700000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 01:00:35.701000 audit[2712]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2712 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.701000 audit[2712]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd36283f60 a2=0 a3=7ffd36283f4c items=0 ppid=2565 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.701000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 01:00:35.704000 audit[2714]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2714 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.704000 audit[2714]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe8c557c80 a2=0 a3=7ffe8c557c6c items=0 ppid=2565 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.704000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 01:00:35.705000 audit[2715]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2715 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.705000 audit[2715]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc320cd70 a2=0 a3=7ffdc320cd5c items=0 ppid=2565 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.705000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 01:00:35.708000 audit[2717]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2717 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.708000 audit[2717]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe63dd29d0 a2=0 a3=7ffe63dd29bc items=0 ppid=2565 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.708000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 01:00:35.712000 audit[2720]: NETFILTER_CFG table=filter:79 family=10 entries=2 op=nft_register_chain pid=2720 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.712000 audit[2720]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffcd72123b0 a2=0 a3=7ffcd721239c items=0 ppid=2565 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.712000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 01:00:35.713000 audit[2721]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_chain pid=2721 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.713000 audit[2721]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd503f22f0 a2=0 a3=7ffd503f22dc items=0 ppid=2565 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.713000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 01:00:35.716000 audit[2723]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.716000 audit[2723]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc32f7f9d0 a2=0 a3=7ffc32f7f9bc items=0 ppid=2565 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.716000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 01:00:35.718000 audit[2724]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.718000 audit[2724]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec1fb8e90 a2=0 a3=7ffec1fb8e7c items=0 ppid=2565 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.718000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 01:00:35.721000 audit[2726]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.721000 audit[2726]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc739fc580 a2=0 a3=7ffc739fc56c items=0 ppid=2565 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.721000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 01:00:35.724000 audit[2729]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2729 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.724000 audit[2729]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd2b04c610 a2=0 a3=7ffd2b04c5fc items=0 ppid=2565 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.724000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 01:00:35.728000 audit[2732]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.728000 audit[2732]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeccddd680 a2=0 a3=7ffeccddd66c items=0 ppid=2565 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.728000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 01:00:35.729000 audit[2733]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.729000 audit[2733]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdf14ac2a0 a2=0 a3=7ffdf14ac28c items=0 ppid=2565 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 01:00:35.731000 audit[2735]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.731000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe39e50ea0 a2=0 a3=7ffe39e50e8c items=0 ppid=2565 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.731000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 01:00:35.735000 audit[2738]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=2738 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.735000 audit[2738]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffecdc18200 a2=0 a3=7ffecdc181ec items=0 ppid=2565 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 01:00:35.736000 audit[2739]: NETFILTER_CFG table=nat:89 family=10 entries=1 op=nft_register_chain pid=2739 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.736000 audit[2739]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd609b9f40 a2=0 a3=7ffd609b9f2c items=0 ppid=2565 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.736000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 01:00:35.738000 audit[2741]: NETFILTER_CFG table=nat:90 family=10 entries=2 op=nft_register_chain pid=2741 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.738000 audit[2741]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffdd7488cb0 a2=0 a3=7ffdd7488c9c items=0 ppid=2565 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.738000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 01:00:35.739000 audit[2742]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.739000 audit[2742]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe3e3ac0d0 a2=0 a3=7ffe3e3ac0bc items=0 ppid=2565 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.739000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 01:00:35.742000 audit[2744]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.742000 audit[2744]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdb25988c0 a2=0 a3=7ffdb25988ac items=0 ppid=2565 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.742000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 01:00:35.745000 audit[2747]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2747 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 01:00:35.745000 audit[2747]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcc8329900 a2=0 a3=7ffcc83298ec items=0 ppid=2565 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.745000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 01:00:35.748000 audit[2749]: NETFILTER_CFG table=filter:94 family=10 entries=3 op=nft_register_rule pid=2749 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 01:00:35.748000 audit[2749]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffdd8fa3060 a2=0 a3=7ffdd8fa304c items=0 ppid=2565 pid=2749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.748000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:35.748000 audit[2749]: NETFILTER_CFG table=nat:95 family=10 entries=7 op=nft_register_chain pid=2749 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 01:00:35.748000 audit[2749]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffdd8fa3060 a2=0 a3=7ffdd8fa304c items=0 ppid=2565 pid=2749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:35.748000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:37.255046 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1658187175.mount: Deactivated successfully. Nov 1 01:00:38.098664 env[1425]: time="2025-11-01T01:00:38.098597959Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:38.104295 env[1425]: time="2025-11-01T01:00:38.104250789Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:38.107990 env[1425]: time="2025-11-01T01:00:38.107959174Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:38.111739 env[1425]: time="2025-11-01T01:00:38.111709160Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:38.112174 env[1425]: time="2025-11-01T01:00:38.112141270Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\"" Nov 1 01:00:38.114915 env[1425]: time="2025-11-01T01:00:38.114871733Z" level=info msg="CreateContainer within sandbox \"ad8952876dd3e56589550456ea24c8d65aec2c29d49526328e95c10cf95848c3\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 01:00:38.145399 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount653283422.mount: Deactivated successfully. Nov 1 01:00:38.165931 env[1425]: time="2025-11-01T01:00:38.165880604Z" level=info msg="CreateContainer within sandbox \"ad8952876dd3e56589550456ea24c8d65aec2c29d49526328e95c10cf95848c3\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"a409f77cc218c4c81e42b3ebf9a3d15b30d1543a832dd6eeb8925efb6e68642c\"" Nov 1 01:00:38.168473 env[1425]: time="2025-11-01T01:00:38.166361915Z" level=info msg="StartContainer for \"a409f77cc218c4c81e42b3ebf9a3d15b30d1543a832dd6eeb8925efb6e68642c\"" Nov 1 01:00:38.183793 systemd[1]: Started cri-containerd-a409f77cc218c4c81e42b3ebf9a3d15b30d1543a832dd6eeb8925efb6e68642c.scope. Nov 1 01:00:38.214219 kernel: kauditd_printk_skb: 315 callbacks suppressed Nov 1 01:00:38.214441 kernel: audit: type=1400 audit(1761958838.195:891): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.238670 kernel: audit: type=1400 audit(1761958838.195:892): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.238755 kernel: audit: type=1400 audit(1761958838.195:893): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.262904 env[1425]: time="2025-11-01T01:00:38.262854831Z" level=info msg="StartContainer for \"a409f77cc218c4c81e42b3ebf9a3d15b30d1543a832dd6eeb8925efb6e68642c\" returns successfully" Nov 1 01:00:38.263351 kernel: audit: type=1400 audit(1761958838.195:894): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.281790 kernel: audit: type=1400 audit(1761958838.195:895): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.302367 kernel: audit: type=1400 audit(1761958838.195:896): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.330809 kernel: audit: type=1400 audit(1761958838.195:897): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.330918 kernel: audit: type=1400 audit(1761958838.195:898): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.355293 kernel: audit: type=1400 audit(1761958838.195:899): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.355415 kernel: audit: type=1400 audit(1761958838.213:900): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit: BPF prog-id=118 op=LOAD Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2595 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:38.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303966373763633231386334633831653432623365626639613364 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2595 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:38.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303966373763633231386334633831653432623365626639613364 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit: BPF prog-id=119 op=LOAD Nov 1 01:00:38.213000 audit[2758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003c0a30 items=0 ppid=2595 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:38.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303966373763633231386334633831653432623365626639613364 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.213000 audit: BPF prog-id=120 op=LOAD Nov 1 01:00:38.213000 audit[2758]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003c0a78 items=0 ppid=2595 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:38.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303966373763633231386334633831653432623365626639613364 Nov 1 01:00:38.213000 audit: BPF prog-id=120 op=UNLOAD Nov 1 01:00:38.214000 audit: BPF prog-id=119 op=UNLOAD Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { perfmon } for pid=2758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit[2758]: AVC avc: denied { bpf } for pid=2758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:38.214000 audit: BPF prog-id=121 op=LOAD Nov 1 01:00:38.214000 audit[2758]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003c0e88 items=0 ppid=2595 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:38.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303966373763633231386334633831653432623365626639613364 Nov 1 01:00:38.563759 kubelet[2460]: I1101 01:00:38.563699 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-mlhn9" podStartSLOduration=1.79895163 podStartE2EDuration="4.56367854s" podCreationTimestamp="2025-11-01 01:00:34 +0000 UTC" firstStartedPulling="2025-11-01 01:00:35.348450884 +0000 UTC m=+5.967501324" lastFinishedPulling="2025-11-01 01:00:38.113177694 +0000 UTC m=+8.732228234" observedRunningTime="2025-11-01 01:00:38.55102835 +0000 UTC m=+9.170078790" watchObservedRunningTime="2025-11-01 01:00:38.56367854 +0000 UTC m=+9.182729080" Nov 1 01:00:44.694000 audit[1833]: USER_END pid=1833 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 01:00:44.695925 sudo[1833]: pam_unix(sudo:session): session closed for user root Nov 1 01:00:44.717668 kernel: kauditd_printk_skb: 47 callbacks suppressed Nov 1 01:00:44.717789 kernel: audit: type=1106 audit(1761958844.694:909): pid=1833 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 01:00:44.694000 audit[1833]: CRED_DISP pid=1833 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 01:00:44.738356 kernel: audit: type=1104 audit(1761958844.694:910): pid=1833 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 01:00:44.821537 sshd[1830]: pam_unix(sshd:session): session closed for user core Nov 1 01:00:44.821000 audit[1830]: USER_END pid=1830 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:00:44.845389 kernel: audit: type=1106 audit(1761958844.821:911): pid=1830 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:00:44.846217 systemd-logind[1416]: Session 9 logged out. Waiting for processes to exit. Nov 1 01:00:44.849278 systemd[1]: sshd@6-10.200.4.8:22-10.200.16.10:39684.service: Deactivated successfully. Nov 1 01:00:44.850142 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 01:00:44.850294 systemd[1]: session-9.scope: Consumed 4.064s CPU time. Nov 1 01:00:44.852039 systemd-logind[1416]: Removed session 9. Nov 1 01:00:44.842000 audit[1830]: CRED_DISP pid=1830 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:00:44.875362 kernel: audit: type=1104 audit(1761958844.842:912): pid=1830 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:00:44.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.4.8:22-10.200.16.10:39684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:44.894355 kernel: audit: type=1131 audit(1761958844.848:913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.4.8:22-10.200.16.10:39684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:00:45.791000 audit[2834]: NETFILTER_CFG table=filter:96 family=2 entries=15 op=nft_register_rule pid=2834 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:45.804466 kernel: audit: type=1325 audit(1761958845.791:914): table=filter:96 family=2 entries=15 op=nft_register_rule pid=2834 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:45.791000 audit[2834]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe460019b0 a2=0 a3=7ffe4600199c items=0 ppid=2565 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:45.827452 kernel: audit: type=1300 audit(1761958845.791:914): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe460019b0 a2=0 a3=7ffe4600199c items=0 ppid=2565 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:45.791000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:45.843375 kernel: audit: type=1327 audit(1761958845.791:914): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:45.827000 audit[2834]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2834 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:45.856393 kernel: audit: type=1325 audit(1761958845.827:915): table=nat:97 family=2 entries=12 op=nft_register_rule pid=2834 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:45.827000 audit[2834]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe460019b0 a2=0 a3=0 items=0 ppid=2565 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:45.880365 kernel: audit: type=1300 audit(1761958845.827:915): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe460019b0 a2=0 a3=0 items=0 ppid=2565 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:45.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:45.920000 audit[2836]: NETFILTER_CFG table=filter:98 family=2 entries=16 op=nft_register_rule pid=2836 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:45.920000 audit[2836]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffff82f1170 a2=0 a3=7ffff82f115c items=0 ppid=2565 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:45.920000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:45.925000 audit[2836]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2836 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:45.925000 audit[2836]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffff82f1170 a2=0 a3=0 items=0 ppid=2565 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:45.925000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:49.169000 audit[2838]: NETFILTER_CFG table=filter:100 family=2 entries=17 op=nft_register_rule pid=2838 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:49.169000 audit[2838]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe343c6db0 a2=0 a3=7ffe343c6d9c items=0 ppid=2565 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:49.169000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:49.178000 audit[2838]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2838 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:49.178000 audit[2838]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe343c6db0 a2=0 a3=0 items=0 ppid=2565 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:49.178000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:49.213000 audit[2840]: NETFILTER_CFG table=filter:102 family=2 entries=18 op=nft_register_rule pid=2840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:49.213000 audit[2840]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffdfcfa4510 a2=0 a3=7ffdfcfa44fc items=0 ppid=2565 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:49.213000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:49.217000 audit[2840]: NETFILTER_CFG table=nat:103 family=2 entries=12 op=nft_register_rule pid=2840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:49.217000 audit[2840]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdfcfa4510 a2=0 a3=0 items=0 ppid=2565 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:49.217000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:50.254429 kernel: kauditd_printk_skb: 19 callbacks suppressed Nov 1 01:00:50.254591 kernel: audit: type=1325 audit(1761958850.234:922): table=filter:104 family=2 entries=19 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:50.234000 audit[2842]: NETFILTER_CFG table=filter:104 family=2 entries=19 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:50.234000 audit[2842]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff666c5600 a2=0 a3=7fff666c55ec items=0 ppid=2565 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:50.284467 kernel: audit: type=1300 audit(1761958850.234:922): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff666c5600 a2=0 a3=7fff666c55ec items=0 ppid=2565 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:50.234000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:50.306367 kernel: audit: type=1327 audit(1761958850.234:922): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:50.257000 audit[2842]: NETFILTER_CFG table=nat:105 family=2 entries=12 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:50.343558 kernel: audit: type=1325 audit(1761958850.257:923): table=nat:105 family=2 entries=12 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:50.343686 kernel: audit: type=1300 audit(1761958850.257:923): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff666c5600 a2=0 a3=0 items=0 ppid=2565 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:50.257000 audit[2842]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff666c5600 a2=0 a3=0 items=0 ppid=2565 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:50.355423 kernel: audit: type=1327 audit(1761958850.257:923): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:50.257000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:51.102559 systemd[1]: Created slice kubepods-besteffort-poda3fbfd8f_7bd8_487c_83a7_061e7879c635.slice. Nov 1 01:00:51.122309 kubelet[2460]: I1101 01:00:51.122269 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/a3fbfd8f-7bd8-487c-83a7-061e7879c635-typha-certs\") pod \"calico-typha-7dc55c4889-fnx75\" (UID: \"a3fbfd8f-7bd8-487c-83a7-061e7879c635\") " pod="calico-system/calico-typha-7dc55c4889-fnx75" Nov 1 01:00:51.122824 kubelet[2460]: I1101 01:00:51.122794 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d6587\" (UniqueName: \"kubernetes.io/projected/a3fbfd8f-7bd8-487c-83a7-061e7879c635-kube-api-access-d6587\") pod \"calico-typha-7dc55c4889-fnx75\" (UID: \"a3fbfd8f-7bd8-487c-83a7-061e7879c635\") " pod="calico-system/calico-typha-7dc55c4889-fnx75" Nov 1 01:00:51.122982 kubelet[2460]: I1101 01:00:51.122964 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a3fbfd8f-7bd8-487c-83a7-061e7879c635-tigera-ca-bundle\") pod \"calico-typha-7dc55c4889-fnx75\" (UID: \"a3fbfd8f-7bd8-487c-83a7-061e7879c635\") " pod="calico-system/calico-typha-7dc55c4889-fnx75" Nov 1 01:00:51.268000 audit[2846]: NETFILTER_CFG table=filter:106 family=2 entries=21 op=nft_register_rule pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:51.280366 kernel: audit: type=1325 audit(1761958851.268:924): table=filter:106 family=2 entries=21 op=nft_register_rule pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:51.268000 audit[2846]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff8dc3f170 a2=0 a3=7fff8dc3f15c items=0 ppid=2565 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:51.268000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:51.313904 kernel: audit: type=1300 audit(1761958851.268:924): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff8dc3f170 a2=0 a3=7fff8dc3f15c items=0 ppid=2565 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:51.314016 kernel: audit: type=1327 audit(1761958851.268:924): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:51.280000 audit[2846]: NETFILTER_CFG table=nat:107 family=2 entries=12 op=nft_register_rule pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:51.325642 kernel: audit: type=1325 audit(1761958851.280:925): table=nat:107 family=2 entries=12 op=nft_register_rule pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:00:51.280000 audit[2846]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff8dc3f170 a2=0 a3=0 items=0 ppid=2565 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:51.280000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:00:51.336864 systemd[1]: Created slice kubepods-besteffort-pod88c3f3ef_9aa8_477a_80bf_f07c1005e89b.slice. Nov 1 01:00:51.407742 env[1425]: time="2025-11-01T01:00:51.407629709Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7dc55c4889-fnx75,Uid:a3fbfd8f-7bd8-487c-83a7-061e7879c635,Namespace:calico-system,Attempt:0,}" Nov 1 01:00:51.450755 env[1425]: time="2025-11-01T01:00:51.450671973Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:00:51.451041 env[1425]: time="2025-11-01T01:00:51.451009679Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:00:51.451276 env[1425]: time="2025-11-01T01:00:51.451220083Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:00:51.452058 env[1425]: time="2025-11-01T01:00:51.451726392Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/16daf75f7c7001bbab2a185357f5de98dc109bfb5840cc9b6b61ced0f968efd7 pid=2854 runtime=io.containerd.runc.v2 Nov 1 01:00:51.478145 systemd[1]: Started cri-containerd-16daf75f7c7001bbab2a185357f5de98dc109bfb5840cc9b6b61ced0f968efd7.scope. Nov 1 01:00:51.499850 kubelet[2460]: E1101 01:00:51.499792 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:00:51.502097 kubelet[2460]: I1101 01:00:51.502064 2460 status_manager.go:890] "Failed to get status for pod" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" pod="calico-system/csi-node-driver-hxt4l" err="pods \"csi-node-driver-hxt4l\" is forbidden: User \"system:node:ci-3510.3.8-n-9d78d981c4\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.8-n-9d78d981c4' and this object" Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.521000 audit: BPF prog-id=122 op=LOAD Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2854 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:51.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136646166373566376337303031626261623261313835333537663564 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2854 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:51.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136646166373566376337303031626261623261313835333537663564 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit: BPF prog-id=123 op=LOAD Nov 1 01:00:51.522000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00031c920 items=0 ppid=2854 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:51.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136646166373566376337303031626261623261313835333537663564 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit: BPF prog-id=124 op=LOAD Nov 1 01:00:51.522000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00031c968 items=0 ppid=2854 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:51.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136646166373566376337303031626261623261313835333537663564 Nov 1 01:00:51.522000 audit: BPF prog-id=124 op=UNLOAD Nov 1 01:00:51.522000 audit: BPF prog-id=123 op=UNLOAD Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { perfmon } for pid=2863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit[2863]: AVC avc: denied { bpf } for pid=2863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:51.522000 audit: BPF prog-id=125 op=LOAD Nov 1 01:00:51.522000 audit[2863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00031cd78 items=0 ppid=2854 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:51.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136646166373566376337303031626261623261313835333537663564 Nov 1 01:00:51.527373 kubelet[2460]: I1101 01:00:51.526807 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-var-lib-calico\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527373 kubelet[2460]: I1101 01:00:51.526852 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-cni-bin-dir\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527373 kubelet[2460]: I1101 01:00:51.526889 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-xtables-lock\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527373 kubelet[2460]: I1101 01:00:51.526915 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q9pls\" (UniqueName: \"kubernetes.io/projected/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-kube-api-access-q9pls\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527373 kubelet[2460]: I1101 01:00:51.526936 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/a3eea3d5-3f7d-4258-b436-9bce8adfc837-registration-dir\") pod \"csi-node-driver-hxt4l\" (UID: \"a3eea3d5-3f7d-4258-b436-9bce8adfc837\") " pod="calico-system/csi-node-driver-hxt4l" Nov 1 01:00:51.527647 kubelet[2460]: I1101 01:00:51.526958 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/a3eea3d5-3f7d-4258-b436-9bce8adfc837-varrun\") pod \"csi-node-driver-hxt4l\" (UID: \"a3eea3d5-3f7d-4258-b436-9bce8adfc837\") " pod="calico-system/csi-node-driver-hxt4l" Nov 1 01:00:51.527647 kubelet[2460]: I1101 01:00:51.526979 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-lib-modules\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527647 kubelet[2460]: I1101 01:00:51.527000 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-node-certs\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527647 kubelet[2460]: I1101 01:00:51.527034 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-tigera-ca-bundle\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527647 kubelet[2460]: I1101 01:00:51.527055 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-var-run-calico\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527846 kubelet[2460]: I1101 01:00:51.527078 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x268t\" (UniqueName: \"kubernetes.io/projected/a3eea3d5-3f7d-4258-b436-9bce8adfc837-kube-api-access-x268t\") pod \"csi-node-driver-hxt4l\" (UID: \"a3eea3d5-3f7d-4258-b436-9bce8adfc837\") " pod="calico-system/csi-node-driver-hxt4l" Nov 1 01:00:51.527846 kubelet[2460]: I1101 01:00:51.527102 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-cni-net-dir\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527846 kubelet[2460]: I1101 01:00:51.527123 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-flexvol-driver-host\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527846 kubelet[2460]: I1101 01:00:51.527146 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-cni-log-dir\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.527846 kubelet[2460]: I1101 01:00:51.527166 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/88c3f3ef-9aa8-477a-80bf-f07c1005e89b-policysync\") pod \"calico-node-mcxmn\" (UID: \"88c3f3ef-9aa8-477a-80bf-f07c1005e89b\") " pod="calico-system/calico-node-mcxmn" Nov 1 01:00:51.528040 kubelet[2460]: I1101 01:00:51.527190 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/a3eea3d5-3f7d-4258-b436-9bce8adfc837-kubelet-dir\") pod \"csi-node-driver-hxt4l\" (UID: \"a3eea3d5-3f7d-4258-b436-9bce8adfc837\") " pod="calico-system/csi-node-driver-hxt4l" Nov 1 01:00:51.528040 kubelet[2460]: I1101 01:00:51.527215 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/a3eea3d5-3f7d-4258-b436-9bce8adfc837-socket-dir\") pod \"csi-node-driver-hxt4l\" (UID: \"a3eea3d5-3f7d-4258-b436-9bce8adfc837\") " pod="calico-system/csi-node-driver-hxt4l" Nov 1 01:00:51.557535 env[1425]: time="2025-11-01T01:00:51.557469469Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7dc55c4889-fnx75,Uid:a3fbfd8f-7bd8-487c-83a7-061e7879c635,Namespace:calico-system,Attempt:0,} returns sandbox id \"16daf75f7c7001bbab2a185357f5de98dc109bfb5840cc9b6b61ced0f968efd7\"" Nov 1 01:00:51.560013 env[1425]: time="2025-11-01T01:00:51.559977714Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 01:00:51.632261 kubelet[2460]: E1101 01:00:51.630290 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:51.632261 kubelet[2460]: W1101 01:00:51.630318 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:51.632261 kubelet[2460]: E1101 01:00:51.630374 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:51.633943 kubelet[2460]: E1101 01:00:51.633917 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:51.634068 kubelet[2460]: W1101 01:00:51.633948 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:51.634068 kubelet[2460]: E1101 01:00:51.633969 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:51.645560 kubelet[2460]: E1101 01:00:51.645536 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:51.645706 kubelet[2460]: W1101 01:00:51.645689 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:51.645793 kubelet[2460]: E1101 01:00:51.645780 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:51.647278 kubelet[2460]: E1101 01:00:51.647255 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:51.647278 kubelet[2460]: W1101 01:00:51.647271 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:51.647416 kubelet[2460]: E1101 01:00:51.647294 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:51.941055 env[1425]: time="2025-11-01T01:00:51.941006178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mcxmn,Uid:88c3f3ef-9aa8-477a-80bf-f07c1005e89b,Namespace:calico-system,Attempt:0,}" Nov 1 01:00:51.986762 env[1425]: time="2025-11-01T01:00:51.986672189Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:00:51.986987 env[1425]: time="2025-11-01T01:00:51.986716889Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:00:51.986987 env[1425]: time="2025-11-01T01:00:51.986731990Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:00:51.987289 env[1425]: time="2025-11-01T01:00:51.987239599Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538 pid=2905 runtime=io.containerd.runc.v2 Nov 1 01:00:52.000238 systemd[1]: Started cri-containerd-ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538.scope. Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.013000 audit: BPF prog-id=126 op=LOAD Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2905 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:52.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303836663738306133323464333336636163346630633334656565 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2905 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:52.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303836663738306133323464333336636163346630633334656565 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit: BPF prog-id=127 op=LOAD Nov 1 01:00:52.014000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000284be0 items=0 ppid=2905 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:52.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303836663738306133323464333336636163346630633334656565 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit: BPF prog-id=128 op=LOAD Nov 1 01:00:52.014000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000284c28 items=0 ppid=2905 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:52.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303836663738306133323464333336636163346630633334656565 Nov 1 01:00:52.014000 audit: BPF prog-id=128 op=UNLOAD Nov 1 01:00:52.014000 audit: BPF prog-id=127 op=UNLOAD Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { perfmon } for pid=2914 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit[2914]: AVC avc: denied { bpf } for pid=2914 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:52.014000 audit: BPF prog-id=129 op=LOAD Nov 1 01:00:52.014000 audit[2914]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000285038 items=0 ppid=2905 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:52.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303836663738306133323464333336636163346630633334656565 Nov 1 01:00:52.030235 env[1425]: time="2025-11-01T01:00:52.030182852Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mcxmn,Uid:88c3f3ef-9aa8-477a-80bf-f07c1005e89b,Namespace:calico-system,Attempt:0,} returns sandbox id \"ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538\"" Nov 1 01:00:53.050112 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount19196245.mount: Deactivated successfully. Nov 1 01:00:53.478133 kubelet[2460]: E1101 01:00:53.477810 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:00:54.675036 env[1425]: time="2025-11-01T01:00:54.674990442Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:54.763440 env[1425]: time="2025-11-01T01:00:54.763388530Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:54.811761 env[1425]: time="2025-11-01T01:00:54.811711943Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:54.872047 env[1425]: time="2025-11-01T01:00:54.871991657Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:54.872959 env[1425]: time="2025-11-01T01:00:54.872915873Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958\"" Nov 1 01:00:54.883978 env[1425]: time="2025-11-01T01:00:54.883948858Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 01:00:54.892511 env[1425]: time="2025-11-01T01:00:54.892474702Z" level=info msg="CreateContainer within sandbox \"16daf75f7c7001bbab2a185357f5de98dc109bfb5840cc9b6b61ced0f968efd7\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 01:00:55.178880 env[1425]: time="2025-11-01T01:00:55.178820268Z" level=info msg="CreateContainer within sandbox \"16daf75f7c7001bbab2a185357f5de98dc109bfb5840cc9b6b61ced0f968efd7\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"07908dd3cf9236a80bf10d4d2ba869a30eefea01ec561869b890c06727438289\"" Nov 1 01:00:55.179906 env[1425]: time="2025-11-01T01:00:55.179865186Z" level=info msg="StartContainer for \"07908dd3cf9236a80bf10d4d2ba869a30eefea01ec561869b890c06727438289\"" Nov 1 01:00:55.240800 systemd[1]: Started cri-containerd-07908dd3cf9236a80bf10d4d2ba869a30eefea01ec561869b890c06727438289.scope. Nov 1 01:00:55.272721 kernel: kauditd_printk_skb: 116 callbacks suppressed Nov 1 01:00:55.272851 kernel: audit: type=1400 audit(1761958855.253:962): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.286172 kernel: audit: type=1400 audit(1761958855.253:963): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.318769 kernel: audit: type=1400 audit(1761958855.253:964): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.318951 kernel: audit: type=1400 audit(1761958855.253:965): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.332408 kernel: audit: type=1400 audit(1761958855.253:966): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.346412 kernel: audit: type=1400 audit(1761958855.253:967): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.361394 kernel: audit: type=1400 audit(1761958855.253:968): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.390836 kernel: audit: type=1400 audit(1761958855.253:969): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.390937 kernel: audit: type=1400 audit(1761958855.253:970): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.392845 kernel: audit: type=1400 audit(1761958855.284:971): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.397952 env[1425]: time="2025-11-01T01:00:55.397912991Z" level=info msg="StartContainer for \"07908dd3cf9236a80bf10d4d2ba869a30eefea01ec561869b890c06727438289\" returns successfully" Nov 1 01:00:55.285000 audit: BPF prog-id=130 op=LOAD Nov 1 01:00:55.286000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.286000 audit[2948]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2854 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:55.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393038646433636639323336613830626631306434643262613836 Nov 1 01:00:55.286000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.286000 audit[2948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2854 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:55.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393038646433636639323336613830626631306434643262613836 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit: BPF prog-id=131 op=LOAD Nov 1 01:00:55.287000 audit[2948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001cb4d0 items=0 ppid=2854 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:55.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393038646433636639323336613830626631306434643262613836 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.287000 audit: BPF prog-id=132 op=LOAD Nov 1 01:00:55.287000 audit[2948]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001cb518 items=0 ppid=2854 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:55.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393038646433636639323336613830626631306434643262613836 Nov 1 01:00:55.287000 audit: BPF prog-id=132 op=UNLOAD Nov 1 01:00:55.287000 audit: BPF prog-id=131 op=UNLOAD Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { perfmon } for pid=2948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit[2948]: AVC avc: denied { bpf } for pid=2948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:55.288000 audit: BPF prog-id=133 op=LOAD Nov 1 01:00:55.288000 audit[2948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001cb928 items=0 ppid=2854 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:55.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393038646433636639323336613830626631306434643262613836 Nov 1 01:00:55.478878 kubelet[2460]: E1101 01:00:55.478489 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:00:55.662803 kubelet[2460]: E1101 01:00:55.662768 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.663038 kubelet[2460]: W1101 01:00:55.663011 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.663184 kubelet[2460]: E1101 01:00:55.663166 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.663526 kubelet[2460]: E1101 01:00:55.663507 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.663632 kubelet[2460]: W1101 01:00:55.663617 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.663725 kubelet[2460]: E1101 01:00:55.663711 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.664007 kubelet[2460]: E1101 01:00:55.663993 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.664103 kubelet[2460]: W1101 01:00:55.664090 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.664196 kubelet[2460]: E1101 01:00:55.664183 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.664570 kubelet[2460]: E1101 01:00:55.664555 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.664685 kubelet[2460]: W1101 01:00:55.664671 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.664774 kubelet[2460]: E1101 01:00:55.664762 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.665091 kubelet[2460]: E1101 01:00:55.665077 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.665188 kubelet[2460]: W1101 01:00:55.665174 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.665272 kubelet[2460]: E1101 01:00:55.665259 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.665559 kubelet[2460]: E1101 01:00:55.665545 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.665676 kubelet[2460]: W1101 01:00:55.665661 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.665789 kubelet[2460]: E1101 01:00:55.665774 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.666090 kubelet[2460]: E1101 01:00:55.666078 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.666182 kubelet[2460]: W1101 01:00:55.666168 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.666260 kubelet[2460]: E1101 01:00:55.666248 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.666548 kubelet[2460]: E1101 01:00:55.666534 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.666654 kubelet[2460]: W1101 01:00:55.666640 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.666736 kubelet[2460]: E1101 01:00:55.666722 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.667029 kubelet[2460]: E1101 01:00:55.667015 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.667129 kubelet[2460]: W1101 01:00:55.667116 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.667211 kubelet[2460]: E1101 01:00:55.667197 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.667674 kubelet[2460]: E1101 01:00:55.667660 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.667846 kubelet[2460]: W1101 01:00:55.667829 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.668049 kubelet[2460]: E1101 01:00:55.668032 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.668353 kubelet[2460]: E1101 01:00:55.668324 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.668449 kubelet[2460]: W1101 01:00:55.668436 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.668520 kubelet[2460]: E1101 01:00:55.668509 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.668777 kubelet[2460]: E1101 01:00:55.668765 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.668871 kubelet[2460]: W1101 01:00:55.668860 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.668943 kubelet[2460]: E1101 01:00:55.668931 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.669416 kubelet[2460]: E1101 01:00:55.669402 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.669516 kubelet[2460]: W1101 01:00:55.669502 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.669610 kubelet[2460]: E1101 01:00:55.669596 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.669878 kubelet[2460]: E1101 01:00:55.669864 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.669988 kubelet[2460]: W1101 01:00:55.669974 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.670071 kubelet[2460]: E1101 01:00:55.670057 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.670341 kubelet[2460]: E1101 01:00:55.670320 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.670443 kubelet[2460]: W1101 01:00:55.670430 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.670516 kubelet[2460]: E1101 01:00:55.670503 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.670917 kubelet[2460]: E1101 01:00:55.670903 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.671035 kubelet[2460]: W1101 01:00:55.671020 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.671123 kubelet[2460]: E1101 01:00:55.671110 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.671499 kubelet[2460]: E1101 01:00:55.671485 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.671939 kubelet[2460]: W1101 01:00:55.671918 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.672049 kubelet[2460]: E1101 01:00:55.672035 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.672424 kubelet[2460]: E1101 01:00:55.672407 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.672538 kubelet[2460]: W1101 01:00:55.672523 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.672623 kubelet[2460]: E1101 01:00:55.672609 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.672899 kubelet[2460]: E1101 01:00:55.672886 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.672990 kubelet[2460]: W1101 01:00:55.672978 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.673065 kubelet[2460]: E1101 01:00:55.673053 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.673384 kubelet[2460]: E1101 01:00:55.673371 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.673493 kubelet[2460]: W1101 01:00:55.673479 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.673577 kubelet[2460]: E1101 01:00:55.673565 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.673831 kubelet[2460]: E1101 01:00:55.673820 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.673920 kubelet[2460]: W1101 01:00:55.673908 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.674007 kubelet[2460]: E1101 01:00:55.673996 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.674272 kubelet[2460]: E1101 01:00:55.674261 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.674416 kubelet[2460]: W1101 01:00:55.674402 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.674505 kubelet[2460]: E1101 01:00:55.674493 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.674777 kubelet[2460]: E1101 01:00:55.674765 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.674872 kubelet[2460]: W1101 01:00:55.674858 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.675015 kubelet[2460]: E1101 01:00:55.675003 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.675309 kubelet[2460]: E1101 01:00:55.675295 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.675438 kubelet[2460]: W1101 01:00:55.675423 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.675526 kubelet[2460]: E1101 01:00:55.675514 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.675828 kubelet[2460]: E1101 01:00:55.675814 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.675927 kubelet[2460]: W1101 01:00:55.675912 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.676033 kubelet[2460]: E1101 01:00:55.676017 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.676306 kubelet[2460]: E1101 01:00:55.676293 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.676466 kubelet[2460]: W1101 01:00:55.676451 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.676576 kubelet[2460]: E1101 01:00:55.676563 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.676902 kubelet[2460]: E1101 01:00:55.676886 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.677104 kubelet[2460]: W1101 01:00:55.677086 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.677223 kubelet[2460]: E1101 01:00:55.677209 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.680633 kubelet[2460]: E1101 01:00:55.680610 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.680742 kubelet[2460]: W1101 01:00:55.680728 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.680834 kubelet[2460]: E1101 01:00:55.680822 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.681134 kubelet[2460]: E1101 01:00:55.681122 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.681236 kubelet[2460]: W1101 01:00:55.681223 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.681327 kubelet[2460]: E1101 01:00:55.681315 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.681968 kubelet[2460]: E1101 01:00:55.681953 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.682073 kubelet[2460]: W1101 01:00:55.682058 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.682160 kubelet[2460]: E1101 01:00:55.682148 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.682487 kubelet[2460]: E1101 01:00:55.682473 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.682582 kubelet[2460]: W1101 01:00:55.682570 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.682671 kubelet[2460]: E1101 01:00:55.682659 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.683391 kubelet[2460]: E1101 01:00:55.683322 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.683515 kubelet[2460]: W1101 01:00:55.683499 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.683615 kubelet[2460]: E1101 01:00:55.683600 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:55.684420 kubelet[2460]: E1101 01:00:55.684404 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:55.684524 kubelet[2460]: W1101 01:00:55.684508 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:55.684627 kubelet[2460]: E1101 01:00:55.684613 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.565253 kubelet[2460]: I1101 01:00:56.565206 2460 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 01:00:56.575232 kubelet[2460]: E1101 01:00:56.575203 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.575232 kubelet[2460]: W1101 01:00:56.575224 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.575491 kubelet[2460]: E1101 01:00:56.575247 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.575559 kubelet[2460]: E1101 01:00:56.575516 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.575559 kubelet[2460]: W1101 01:00:56.575530 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.575559 kubelet[2460]: E1101 01:00:56.575554 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.575773 kubelet[2460]: E1101 01:00:56.575754 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.575773 kubelet[2460]: W1101 01:00:56.575772 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.575913 kubelet[2460]: E1101 01:00:56.575789 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.576003 kubelet[2460]: E1101 01:00:56.575987 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.576073 kubelet[2460]: W1101 01:00:56.576004 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.576073 kubelet[2460]: E1101 01:00:56.576022 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.576253 kubelet[2460]: E1101 01:00:56.576235 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.576253 kubelet[2460]: W1101 01:00:56.576253 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.576403 kubelet[2460]: E1101 01:00:56.576270 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.576492 kubelet[2460]: E1101 01:00:56.576474 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.576567 kubelet[2460]: W1101 01:00:56.576503 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.576567 kubelet[2460]: E1101 01:00:56.576519 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.576726 kubelet[2460]: E1101 01:00:56.576709 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.576726 kubelet[2460]: W1101 01:00:56.576725 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.576848 kubelet[2460]: E1101 01:00:56.576738 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.576999 kubelet[2460]: E1101 01:00:56.576912 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.576999 kubelet[2460]: W1101 01:00:56.576925 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.576999 kubelet[2460]: E1101 01:00:56.576935 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.577166 kubelet[2460]: E1101 01:00:56.577126 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.577166 kubelet[2460]: W1101 01:00:56.577139 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.577166 kubelet[2460]: E1101 01:00:56.577152 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.577319 kubelet[2460]: E1101 01:00:56.577312 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.577399 kubelet[2460]: W1101 01:00:56.577321 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.577399 kubelet[2460]: E1101 01:00:56.577350 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.577656 kubelet[2460]: E1101 01:00:56.577519 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.577656 kubelet[2460]: W1101 01:00:56.577532 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.577656 kubelet[2460]: E1101 01:00:56.577543 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.577832 kubelet[2460]: E1101 01:00:56.577742 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.577832 kubelet[2460]: W1101 01:00:56.577753 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.577832 kubelet[2460]: E1101 01:00:56.577777 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.577973 kubelet[2460]: E1101 01:00:56.577954 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.577973 kubelet[2460]: W1101 01:00:56.577963 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.578073 kubelet[2460]: E1101 01:00:56.577974 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.578393 kubelet[2460]: E1101 01:00:56.578137 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.578393 kubelet[2460]: W1101 01:00:56.578151 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.578393 kubelet[2460]: E1101 01:00:56.578162 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.578393 kubelet[2460]: E1101 01:00:56.578346 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.578393 kubelet[2460]: W1101 01:00:56.578358 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.578393 kubelet[2460]: E1101 01:00:56.578369 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.579207 kubelet[2460]: E1101 01:00:56.578692 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.579207 kubelet[2460]: W1101 01:00:56.578707 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.579207 kubelet[2460]: E1101 01:00:56.578718 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.579207 kubelet[2460]: E1101 01:00:56.578916 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.579207 kubelet[2460]: W1101 01:00:56.578925 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.579207 kubelet[2460]: E1101 01:00:56.578936 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.579207 kubelet[2460]: E1101 01:00:56.579123 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.579207 kubelet[2460]: W1101 01:00:56.579135 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.579207 kubelet[2460]: E1101 01:00:56.579147 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.579661 kubelet[2460]: E1101 01:00:56.579404 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.579661 kubelet[2460]: W1101 01:00:56.579415 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.579661 kubelet[2460]: E1101 01:00:56.579428 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.579661 kubelet[2460]: E1101 01:00:56.579599 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.579661 kubelet[2460]: W1101 01:00:56.579610 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.579661 kubelet[2460]: E1101 01:00:56.579621 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.579930 kubelet[2460]: E1101 01:00:56.579780 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.579930 kubelet[2460]: W1101 01:00:56.579790 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.579930 kubelet[2460]: E1101 01:00:56.579800 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.580061 kubelet[2460]: E1101 01:00:56.579994 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.580061 kubelet[2460]: W1101 01:00:56.580004 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.580061 kubelet[2460]: E1101 01:00:56.580015 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.580498 kubelet[2460]: E1101 01:00:56.580478 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.580498 kubelet[2460]: W1101 01:00:56.580492 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.580639 kubelet[2460]: E1101 01:00:56.580511 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.580738 kubelet[2460]: E1101 01:00:56.580719 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.580738 kubelet[2460]: W1101 01:00:56.580735 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.580861 kubelet[2460]: E1101 01:00:56.580752 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.580979 kubelet[2460]: E1101 01:00:56.580966 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.581064 kubelet[2460]: W1101 01:00:56.581050 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.581150 kubelet[2460]: E1101 01:00:56.581138 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.581596 kubelet[2460]: E1101 01:00:56.581575 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.581596 kubelet[2460]: W1101 01:00:56.581589 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.581757 kubelet[2460]: E1101 01:00:56.581608 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.581825 kubelet[2460]: E1101 01:00:56.581808 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.581879 kubelet[2460]: W1101 01:00:56.581827 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.581879 kubelet[2460]: E1101 01:00:56.581840 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.582040 kubelet[2460]: E1101 01:00:56.582026 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.582040 kubelet[2460]: W1101 01:00:56.582038 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.582158 kubelet[2460]: E1101 01:00:56.582054 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.582243 kubelet[2460]: E1101 01:00:56.582225 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.582243 kubelet[2460]: W1101 01:00:56.582239 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.582347 kubelet[2460]: E1101 01:00:56.582256 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.585020 kubelet[2460]: E1101 01:00:56.583425 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.585020 kubelet[2460]: W1101 01:00:56.583440 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.585020 kubelet[2460]: E1101 01:00:56.583646 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.585020 kubelet[2460]: W1101 01:00:56.583656 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.585020 kubelet[2460]: E1101 01:00:56.583669 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.585020 kubelet[2460]: E1101 01:00:56.583999 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.585020 kubelet[2460]: W1101 01:00:56.584011 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.585020 kubelet[2460]: E1101 01:00:56.584026 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.585020 kubelet[2460]: E1101 01:00:56.584047 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:56.585020 kubelet[2460]: E1101 01:00:56.584448 2460 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 01:00:56.585537 kubelet[2460]: W1101 01:00:56.584460 2460 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 01:00:56.585537 kubelet[2460]: E1101 01:00:56.584472 2460 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 01:00:57.418894 env[1425]: time="2025-11-01T01:00:57.418835497Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:57.467446 env[1425]: time="2025-11-01T01:00:57.467304972Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:57.477374 kubelet[2460]: E1101 01:00:57.476788 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:00:57.512511 env[1425]: time="2025-11-01T01:00:57.512454294Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:57.516414 env[1425]: time="2025-11-01T01:00:57.516372656Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:00:57.516967 env[1425]: time="2025-11-01T01:00:57.516926465Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5\"" Nov 1 01:00:57.520178 env[1425]: time="2025-11-01T01:00:57.520144917Z" level=info msg="CreateContainer within sandbox \"ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 01:00:57.864546 env[1425]: time="2025-11-01T01:00:57.864487920Z" level=info msg="CreateContainer within sandbox \"ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452\"" Nov 1 01:00:57.867203 env[1425]: time="2025-11-01T01:00:57.867168663Z" level=info msg="StartContainer for \"039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452\"" Nov 1 01:00:57.896769 systemd[1]: Started cri-containerd-039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452.scope. Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fe518024de8 items=0 ppid=2905 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:57.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033396465623462353235656562656465313962623663313062383032 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit: BPF prog-id=134 op=LOAD Nov 1 01:00:57.909000 audit[3054]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c00030a158 items=0 ppid=2905 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:57.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033396465623462353235656562656465313962623663313062383032 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit: BPF prog-id=135 op=LOAD Nov 1 01:00:57.909000 audit[3054]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c00030a1a8 items=0 ppid=2905 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:57.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033396465623462353235656562656465313962623663313062383032 Nov 1 01:00:57.909000 audit: BPF prog-id=135 op=UNLOAD Nov 1 01:00:57.909000 audit: BPF prog-id=134 op=UNLOAD Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:00:57.909000 audit: BPF prog-id=136 op=LOAD Nov 1 01:00:57.909000 audit[3054]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c00030a238 items=0 ppid=2905 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:00:57.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033396465623462353235656562656465313962623663313062383032 Nov 1 01:00:57.933716 env[1425]: time="2025-11-01T01:00:57.933666326Z" level=info msg="StartContainer for \"039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452\" returns successfully" Nov 1 01:00:57.934972 systemd[1]: cri-containerd-039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452.scope: Deactivated successfully. Nov 1 01:00:57.938000 audit: BPF prog-id=136 op=UNLOAD Nov 1 01:00:57.963406 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452-rootfs.mount: Deactivated successfully. Nov 1 01:00:58.587779 kubelet[2460]: I1101 01:00:58.587715 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7dc55c4889-fnx75" podStartSLOduration=4.271822515 podStartE2EDuration="7.587696925s" podCreationTimestamp="2025-11-01 01:00:51 +0000 UTC" firstStartedPulling="2025-11-01 01:00:51.558708791 +0000 UTC m=+22.177759231" lastFinishedPulling="2025-11-01 01:00:54.874583201 +0000 UTC m=+25.493633641" observedRunningTime="2025-11-01 01:00:55.643066045 +0000 UTC m=+26.262116585" watchObservedRunningTime="2025-11-01 01:00:58.587696925 +0000 UTC m=+29.206747465" Nov 1 01:00:59.477291 kubelet[2460]: E1101 01:00:59.477228 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:01.477232 kubelet[2460]: E1101 01:01:01.477171 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:03.476485 kubelet[2460]: E1101 01:01:03.476420 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:05.477048 kubelet[2460]: E1101 01:01:05.476995 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:07.762797 kubelet[2460]: E1101 01:01:07.476751 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:07.938048 env[1425]: time="2025-11-01T01:01:07.937984052Z" level=error msg="failed to handle container TaskExit event &TaskExit{ContainerID:039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452,ID:039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452,Pid:3064,ExitStatus:0,ExitedAt:2025-11-01 01:00:57.936892477 +0000 UTC,XXX_unrecognized:[],}" error="failed to stop container: failed to delete task: context deadline exceeded: unknown" Nov 1 01:01:09.477864 kubelet[2460]: E1101 01:01:09.477807 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:09.607468 env[1425]: time="2025-11-01T01:01:09.607411883Z" level=info msg="TaskExit event &TaskExit{ContainerID:039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452,ID:039deb4b525eebede19bb6c10b8027c9799d36b7ad1167036871eeeb45616452,Pid:3064,ExitStatus:0,ExitedAt:2025-11-01 01:00:57.936892477 +0000 UTC,XXX_unrecognized:[],}" Nov 1 01:01:10.461676 kubelet[2460]: I1101 01:01:10.461629 2460 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 01:01:10.549000 audit[3102]: NETFILTER_CFG table=filter:108 family=2 entries=21 op=nft_register_rule pid=3102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:10.554730 kernel: kauditd_printk_skb: 91 callbacks suppressed Nov 1 01:01:10.554826 kernel: audit: type=1325 audit(1761958870.549:987): table=filter:108 family=2 entries=21 op=nft_register_rule pid=3102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:10.566353 kernel: audit: type=1300 audit(1761958870.549:987): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe8bc01010 a2=0 a3=7ffe8bc00ffc items=0 ppid=2565 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:10.549000 audit[3102]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe8bc01010 a2=0 a3=7ffe8bc00ffc items=0 ppid=2565 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:10.549000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:10.595887 env[1425]: time="2025-11-01T01:01:10.595645330Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 01:01:10.598759 kernel: audit: type=1327 audit(1761958870.549:987): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:10.600268 kernel: audit: type=1325 audit(1761958870.589:988): table=nat:109 family=2 entries=19 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:10.589000 audit[3102]: NETFILTER_CFG table=nat:109 family=2 entries=19 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:10.589000 audit[3102]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe8bc01010 a2=0 a3=7ffe8bc00ffc items=0 ppid=2565 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:10.628961 kernel: audit: type=1300 audit(1761958870.589:988): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe8bc01010 a2=0 a3=7ffe8bc00ffc items=0 ppid=2565 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:10.629050 kernel: audit: type=1327 audit(1761958870.589:988): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:10.589000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:11.476675 kubelet[2460]: E1101 01:01:11.476618 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:13.478241 kubelet[2460]: E1101 01:01:13.478189 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:15.477393 kubelet[2460]: E1101 01:01:15.477323 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:15.732231 env[1425]: time="2025-11-01T01:01:15.732090686Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:01:15.740456 env[1425]: time="2025-11-01T01:01:15.740419188Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:01:15.743977 env[1425]: time="2025-11-01T01:01:15.743950532Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:01:15.747786 env[1425]: time="2025-11-01T01:01:15.747758579Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:01:15.748176 env[1425]: time="2025-11-01T01:01:15.748145783Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd\"" Nov 1 01:01:15.751131 env[1425]: time="2025-11-01T01:01:15.751099920Z" level=info msg="CreateContainer within sandbox \"ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 01:01:15.792168 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4085531789.mount: Deactivated successfully. Nov 1 01:01:15.810467 env[1425]: time="2025-11-01T01:01:15.810294948Z" level=info msg="CreateContainer within sandbox \"ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea\"" Nov 1 01:01:15.812830 env[1425]: time="2025-11-01T01:01:15.811534964Z" level=info msg="StartContainer for \"30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea\"" Nov 1 01:01:15.847372 systemd[1]: Started cri-containerd-30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea.scope. Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f35964f16d8 items=0 ppid=2905 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:15.895921 kernel: audit: type=1400 audit(1761958875.861:989): avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.896035 kernel: audit: type=1300 audit(1761958875.861:989): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f35964f16d8 items=0 ppid=2905 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:15.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330663261376333633565313832393963333862343837333433326165 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.931877 kernel: audit: type=1327 audit(1761958875.861:989): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330663261376333633565313832393963333862343837333433326165 Nov 1 01:01:15.931981 kernel: audit: type=1400 audit(1761958875.861:990): avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.963969 kernel: audit: type=1400 audit(1761958875.861:990): avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.964047 kernel: audit: type=1400 audit(1761958875.861:990): avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.978371 kernel: audit: type=1400 audit(1761958875.861:990): avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.978462 kernel: audit: type=1400 audit(1761958875.861:990): avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.978809 env[1425]: time="2025-11-01T01:01:15.978769923Z" level=info msg="StartContainer for \"30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea\" returns successfully" Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:16.007363 kernel: audit: type=1400 audit(1761958875.861:990): avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.861000 audit: BPF prog-id=137 op=LOAD Nov 1 01:01:15.861000 audit[3111]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001fa598 items=0 ppid=2905 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:15.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330663261376333633565313832393963333862343837333433326165 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit: BPF prog-id=138 op=LOAD Nov 1 01:01:15.875000 audit[3111]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001fa5e8 items=0 ppid=2905 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:16.023373 kernel: audit: type=1400 audit(1761958875.861:990): avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330663261376333633565313832393963333862343837333433326165 Nov 1 01:01:15.895000 audit: BPF prog-id=138 op=UNLOAD Nov 1 01:01:15.895000 audit: BPF prog-id=137 op=UNLOAD Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { perfmon } for pid=3111 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit[3111]: AVC avc: denied { bpf } for pid=3111 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:15.895000 audit: BPF prog-id=139 op=LOAD Nov 1 01:01:15.895000 audit[3111]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001fa678 items=0 ppid=2905 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:15.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330663261376333633565313832393963333862343837333433326165 Nov 1 01:01:16.790805 systemd[1]: run-containerd-runc-k8s.io-30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea-runc.4H6Usv.mount: Deactivated successfully. Nov 1 01:01:17.478502 kubelet[2460]: E1101 01:01:17.478446 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:17.705617 env[1425]: time="2025-11-01T01:01:17.705452826Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 01:01:17.707727 systemd[1]: cri-containerd-30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea.scope: Deactivated successfully. Nov 1 01:01:17.712000 audit: BPF prog-id=139 op=UNLOAD Nov 1 01:01:17.731070 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea-rootfs.mount: Deactivated successfully. Nov 1 01:01:17.756794 kubelet[2460]: I1101 01:01:17.756767 2460 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 01:01:18.321521 kubelet[2460]: I1101 01:01:17.918007 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kh622\" (UniqueName: \"kubernetes.io/projected/83c13b51-0c6a-45c0-b7f7-16b452c52e64-kube-api-access-kh622\") pod \"coredns-668d6bf9bc-rb8hl\" (UID: \"83c13b51-0c6a-45c0-b7f7-16b452c52e64\") " pod="kube-system/coredns-668d6bf9bc-rb8hl" Nov 1 01:01:18.321521 kubelet[2460]: I1101 01:01:17.918039 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-whisker-ca-bundle\") pod \"whisker-6b56874c99-xwjgw\" (UID: \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\") " pod="calico-system/whisker-6b56874c99-xwjgw" Nov 1 01:01:18.321521 kubelet[2460]: I1101 01:01:17.918074 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/56dcd17c-f13d-4889-8b88-69d06e438fd0-calico-apiserver-certs\") pod \"calico-apiserver-88f7866b5-794bz\" (UID: \"56dcd17c-f13d-4889-8b88-69d06e438fd0\") " pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" Nov 1 01:01:18.321521 kubelet[2460]: I1101 01:01:17.918102 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3-calico-apiserver-certs\") pod \"calico-apiserver-88f7866b5-knct7\" (UID: \"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3\") " pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" Nov 1 01:01:18.321521 kubelet[2460]: I1101 01:01:17.918118 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kmkfz\" (UniqueName: \"kubernetes.io/projected/4e3f47c8-00e9-4d23-af1c-56111466a677-kube-api-access-kmkfz\") pod \"goldmane-666569f655-nk2dv\" (UID: \"4e3f47c8-00e9-4d23-af1c-56111466a677\") " pod="calico-system/goldmane-666569f655-nk2dv" Nov 1 01:01:17.845641 systemd[1]: Created slice kubepods-burstable-pod83c13b51_0c6a_45c0_b7f7_16b452c52e64.slice. Nov 1 01:01:18.322022 kubelet[2460]: I1101 01:01:17.918147 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/83c13b51-0c6a-45c0-b7f7-16b452c52e64-config-volume\") pod \"coredns-668d6bf9bc-rb8hl\" (UID: \"83c13b51-0c6a-45c0-b7f7-16b452c52e64\") " pod="kube-system/coredns-668d6bf9bc-rb8hl" Nov 1 01:01:18.322022 kubelet[2460]: I1101 01:01:17.918173 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nlxhs\" (UniqueName: \"kubernetes.io/projected/25c95b45-63cd-474c-ab3f-810f3121d2f5-kube-api-access-nlxhs\") pod \"calico-kube-controllers-77948f7547-899dr\" (UID: \"25c95b45-63cd-474c-ab3f-810f3121d2f5\") " pod="calico-system/calico-kube-controllers-77948f7547-899dr" Nov 1 01:01:18.322022 kubelet[2460]: I1101 01:01:17.918194 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/4e3f47c8-00e9-4d23-af1c-56111466a677-goldmane-key-pair\") pod \"goldmane-666569f655-nk2dv\" (UID: \"4e3f47c8-00e9-4d23-af1c-56111466a677\") " pod="calico-system/goldmane-666569f655-nk2dv" Nov 1 01:01:18.322022 kubelet[2460]: I1101 01:01:17.918222 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7pbkx\" (UniqueName: \"kubernetes.io/projected/e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3-kube-api-access-7pbkx\") pod \"calico-apiserver-88f7866b5-knct7\" (UID: \"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3\") " pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" Nov 1 01:01:18.322022 kubelet[2460]: I1101 01:01:17.918242 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vkl52\" (UniqueName: \"kubernetes.io/projected/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-kube-api-access-vkl52\") pod \"whisker-6b56874c99-xwjgw\" (UID: \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\") " pod="calico-system/whisker-6b56874c99-xwjgw" Nov 1 01:01:17.858567 systemd[1]: Created slice kubepods-burstable-pod9496b934_0cb3_4fbd_9030_ca901c84f793.slice. Nov 1 01:01:18.322323 kubelet[2460]: I1101 01:01:17.918264 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4e3f47c8-00e9-4d23-af1c-56111466a677-goldmane-ca-bundle\") pod \"goldmane-666569f655-nk2dv\" (UID: \"4e3f47c8-00e9-4d23-af1c-56111466a677\") " pod="calico-system/goldmane-666569f655-nk2dv" Nov 1 01:01:18.322323 kubelet[2460]: I1101 01:01:17.918296 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/25c95b45-63cd-474c-ab3f-810f3121d2f5-tigera-ca-bundle\") pod \"calico-kube-controllers-77948f7547-899dr\" (UID: \"25c95b45-63cd-474c-ab3f-810f3121d2f5\") " pod="calico-system/calico-kube-controllers-77948f7547-899dr" Nov 1 01:01:18.322323 kubelet[2460]: I1101 01:01:17.918311 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-whisker-backend-key-pair\") pod \"whisker-6b56874c99-xwjgw\" (UID: \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\") " pod="calico-system/whisker-6b56874c99-xwjgw" Nov 1 01:01:18.322323 kubelet[2460]: I1101 01:01:17.918342 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/4e3f47c8-00e9-4d23-af1c-56111466a677-config\") pod \"goldmane-666569f655-nk2dv\" (UID: \"4e3f47c8-00e9-4d23-af1c-56111466a677\") " pod="calico-system/goldmane-666569f655-nk2dv" Nov 1 01:01:18.322323 kubelet[2460]: I1101 01:01:17.918393 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/9496b934-0cb3-4fbd-9030-ca901c84f793-config-volume\") pod \"coredns-668d6bf9bc-j8n8l\" (UID: \"9496b934-0cb3-4fbd-9030-ca901c84f793\") " pod="kube-system/coredns-668d6bf9bc-j8n8l" Nov 1 01:01:17.868690 systemd[1]: Created slice kubepods-besteffort-pod25c95b45_63cd_474c_ab3f_810f3121d2f5.slice. Nov 1 01:01:18.322624 kubelet[2460]: I1101 01:01:17.918419 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v6qhr\" (UniqueName: \"kubernetes.io/projected/9496b934-0cb3-4fbd-9030-ca901c84f793-kube-api-access-v6qhr\") pod \"coredns-668d6bf9bc-j8n8l\" (UID: \"9496b934-0cb3-4fbd-9030-ca901c84f793\") " pod="kube-system/coredns-668d6bf9bc-j8n8l" Nov 1 01:01:18.322624 kubelet[2460]: I1101 01:01:17.918447 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qrqpb\" (UniqueName: \"kubernetes.io/projected/56dcd17c-f13d-4889-8b88-69d06e438fd0-kube-api-access-qrqpb\") pod \"calico-apiserver-88f7866b5-794bz\" (UID: \"56dcd17c-f13d-4889-8b88-69d06e438fd0\") " pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" Nov 1 01:01:17.886093 systemd[1]: Created slice kubepods-besteffort-pod56dcd17c_f13d_4889_8b88_69d06e438fd0.slice. Nov 1 01:01:17.897629 systemd[1]: Created slice kubepods-besteffort-pod4e3f47c8_00e9_4d23_af1c_56111466a677.slice. Nov 1 01:01:17.900846 systemd[1]: Created slice kubepods-besteffort-pode6bbb0b8_1f6b_4971_8bbb_0c65a2fea3a3.slice. Nov 1 01:01:17.905525 systemd[1]: Created slice kubepods-besteffort-podef80cd40_70f4_4c6a_8c97_25e5c1d10fdc.slice. Nov 1 01:01:18.362157 env[1425]: time="2025-11-01T01:01:18.362103467Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-j8n8l,Uid:9496b934-0cb3-4fbd-9030-ca901c84f793,Namespace:kube-system,Attempt:0,}" Nov 1 01:01:18.622653 env[1425]: time="2025-11-01T01:01:18.622503660Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-rb8hl,Uid:83c13b51-0c6a-45c0-b7f7-16b452c52e64,Namespace:kube-system,Attempt:0,}" Nov 1 01:01:18.627943 env[1425]: time="2025-11-01T01:01:18.627895224Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6b56874c99-xwjgw,Uid:ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc,Namespace:calico-system,Attempt:0,}" Nov 1 01:01:18.628143 env[1425]: time="2025-11-01T01:01:18.627907424Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-77948f7547-899dr,Uid:25c95b45-63cd-474c-ab3f-810f3121d2f5,Namespace:calico-system,Attempt:0,}" Nov 1 01:01:18.637059 env[1425]: time="2025-11-01T01:01:18.637017533Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-88f7866b5-794bz,Uid:56dcd17c-f13d-4889-8b88-69d06e438fd0,Namespace:calico-apiserver,Attempt:0,}" Nov 1 01:01:18.655759 env[1425]: time="2025-11-01T01:01:18.655696855Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-nk2dv,Uid:4e3f47c8-00e9-4d23-af1c-56111466a677,Namespace:calico-system,Attempt:0,}" Nov 1 01:01:18.659372 env[1425]: time="2025-11-01T01:01:18.659309598Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-88f7866b5-knct7,Uid:e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3,Namespace:calico-apiserver,Attempt:0,}" Nov 1 01:01:19.485235 systemd[1]: Created slice kubepods-besteffort-poda3eea3d5_3f7d_4258_b436_9bce8adfc837.slice. Nov 1 01:01:19.487550 env[1425]: time="2025-11-01T01:01:19.487509969Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hxt4l,Uid:a3eea3d5-3f7d-4258-b436-9bce8adfc837,Namespace:calico-system,Attempt:0,}" Nov 1 01:01:20.465571 env[1425]: time="2025-11-01T01:01:20.465501293Z" level=info msg="shim disconnected" id=30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea Nov 1 01:01:20.465571 env[1425]: time="2025-11-01T01:01:20.465565394Z" level=warning msg="cleaning up after shim disconnected" id=30f2a7c3c5e18299c38b4873432ae9f64cf20acd7003390495ffed9717c31fea namespace=k8s.io Nov 1 01:01:20.465571 env[1425]: time="2025-11-01T01:01:20.465577094Z" level=info msg="cleaning up dead shim" Nov 1 01:01:20.473703 env[1425]: time="2025-11-01T01:01:20.473655288Z" level=warning msg="cleanup warnings time=\"2025-11-01T01:01:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3184 runtime=io.containerd.runc.v2\n" Nov 1 01:01:20.625153 env[1425]: time="2025-11-01T01:01:20.624447739Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 01:01:22.964408 env[1425]: time="2025-11-01T01:01:22.964327143Z" level=error msg="Failed to destroy network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:22.964931 env[1425]: time="2025-11-01T01:01:22.964726547Z" level=error msg="encountered an error cleaning up failed sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:22.964931 env[1425]: time="2025-11-01T01:01:22.964792748Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-77948f7547-899dr,Uid:25c95b45-63cd-474c-ab3f-810f3121d2f5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:22.965155 kubelet[2460]: E1101 01:01:22.965105 2460 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:22.965498 kubelet[2460]: E1101 01:01:22.965206 2460 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-77948f7547-899dr" Nov 1 01:01:22.965498 kubelet[2460]: E1101 01:01:22.965243 2460 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-77948f7547-899dr" Nov 1 01:01:22.965498 kubelet[2460]: E1101 01:01:22.965309 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-77948f7547-899dr_calico-system(25c95b45-63cd-474c-ab3f-810f3121d2f5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-77948f7547-899dr_calico-system(25c95b45-63cd-474c-ab3f-810f3121d2f5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:01:23.348443 env[1425]: time="2025-11-01T01:01:23.347720658Z" level=error msg="Failed to destroy network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.348443 env[1425]: time="2025-11-01T01:01:23.348158463Z" level=error msg="encountered an error cleaning up failed sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.348443 env[1425]: time="2025-11-01T01:01:23.348238964Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6b56874c99-xwjgw,Uid:ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.353473 kubelet[2460]: E1101 01:01:23.349102 2460 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.353473 kubelet[2460]: E1101 01:01:23.349185 2460 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6b56874c99-xwjgw" Nov 1 01:01:23.353473 kubelet[2460]: E1101 01:01:23.349213 2460 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6b56874c99-xwjgw" Nov 1 01:01:23.353717 kubelet[2460]: E1101 01:01:23.349269 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6b56874c99-xwjgw_calico-system(ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6b56874c99-xwjgw_calico-system(ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6b56874c99-xwjgw" podUID="ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc" Nov 1 01:01:23.402917 env[1425]: time="2025-11-01T01:01:23.402829877Z" level=error msg="Failed to destroy network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.403354 env[1425]: time="2025-11-01T01:01:23.403283182Z" level=error msg="encountered an error cleaning up failed sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.403481 env[1425]: time="2025-11-01T01:01:23.403402484Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-88f7866b5-794bz,Uid:56dcd17c-f13d-4889-8b88-69d06e438fd0,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.403743 kubelet[2460]: E1101 01:01:23.403686 2460 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.403847 kubelet[2460]: E1101 01:01:23.403777 2460 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" Nov 1 01:01:23.403909 kubelet[2460]: E1101 01:01:23.403840 2460 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" Nov 1 01:01:23.403958 kubelet[2460]: E1101 01:01:23.403918 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-88f7866b5-794bz_calico-apiserver(56dcd17c-f13d-4889-8b88-69d06e438fd0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-88f7866b5-794bz_calico-apiserver(56dcd17c-f13d-4889-8b88-69d06e438fd0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:01:23.421283 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b-shm.mount: Deactivated successfully. Nov 1 01:01:23.424989 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b-shm.mount: Deactivated successfully. Nov 1 01:01:23.425113 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748-shm.mount: Deactivated successfully. Nov 1 01:01:23.574372 env[1425]: time="2025-11-01T01:01:23.574289205Z" level=error msg="Failed to destroy network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.580428 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a-shm.mount: Deactivated successfully. Nov 1 01:01:23.583203 env[1425]: time="2025-11-01T01:01:23.583145405Z" level=error msg="encountered an error cleaning up failed sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.583322 env[1425]: time="2025-11-01T01:01:23.583230806Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-nk2dv,Uid:4e3f47c8-00e9-4d23-af1c-56111466a677,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.583527 kubelet[2460]: E1101 01:01:23.583488 2460 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.583613 kubelet[2460]: E1101 01:01:23.583557 2460 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-nk2dv" Nov 1 01:01:23.583613 kubelet[2460]: E1101 01:01:23.583586 2460 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-nk2dv" Nov 1 01:01:23.583714 kubelet[2460]: E1101 01:01:23.583634 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-nk2dv_calico-system(4e3f47c8-00e9-4d23-af1c-56111466a677)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-nk2dv_calico-system(4e3f47c8-00e9-4d23-af1c-56111466a677)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:01:23.631280 kubelet[2460]: I1101 01:01:23.628895 2460 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:01:23.631447 env[1425]: time="2025-11-01T01:01:23.629987231Z" level=info msg="StopPodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\"" Nov 1 01:01:23.631598 env[1425]: time="2025-11-01T01:01:23.631559549Z" level=error msg="Failed to destroy network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.632023 env[1425]: time="2025-11-01T01:01:23.631983354Z" level=error msg="encountered an error cleaning up failed sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.632221 env[1425]: time="2025-11-01T01:01:23.632187156Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-88f7866b5-knct7,Uid:e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.632641 kubelet[2460]: E1101 01:01:23.632468 2460 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.632641 kubelet[2460]: E1101 01:01:23.632514 2460 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" Nov 1 01:01:23.632641 kubelet[2460]: E1101 01:01:23.632541 2460 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" Nov 1 01:01:23.632833 kubelet[2460]: E1101 01:01:23.632586 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-88f7866b5-knct7_calico-apiserver(e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-88f7866b5-knct7_calico-apiserver(e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:01:23.634217 kubelet[2460]: I1101 01:01:23.633879 2460 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:01:23.634494 env[1425]: time="2025-11-01T01:01:23.634469482Z" level=info msg="StopPodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\"" Nov 1 01:01:23.635980 kubelet[2460]: I1101 01:01:23.635630 2460 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:01:23.636231 env[1425]: time="2025-11-01T01:01:23.636202101Z" level=info msg="StopPodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\"" Nov 1 01:01:23.639262 kubelet[2460]: I1101 01:01:23.637911 2460 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:01:23.637977 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f-shm.mount: Deactivated successfully. Nov 1 01:01:23.639671 env[1425]: time="2025-11-01T01:01:23.639633840Z" level=info msg="StopPodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\"" Nov 1 01:01:23.665429 env[1425]: time="2025-11-01T01:01:23.665374729Z" level=error msg="Failed to destroy network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.665789 env[1425]: time="2025-11-01T01:01:23.665752333Z" level=error msg="encountered an error cleaning up failed sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.665893 env[1425]: time="2025-11-01T01:01:23.665807434Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-j8n8l,Uid:9496b934-0cb3-4fbd-9030-ca901c84f793,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.666006 kubelet[2460]: E1101 01:01:23.665974 2460 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.666105 kubelet[2460]: E1101 01:01:23.666038 2460 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-j8n8l" Nov 1 01:01:23.666105 kubelet[2460]: E1101 01:01:23.666066 2460 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-j8n8l" Nov 1 01:01:23.666201 kubelet[2460]: E1101 01:01:23.666122 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-j8n8l_kube-system(9496b934-0cb3-4fbd-9030-ca901c84f793)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-j8n8l_kube-system(9496b934-0cb3-4fbd-9030-ca901c84f793)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-j8n8l" podUID="9496b934-0cb3-4fbd-9030-ca901c84f793" Nov 1 01:01:23.757111 env[1425]: time="2025-11-01T01:01:23.757040460Z" level=error msg="StopPodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\" failed" error="failed to destroy network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.757651 kubelet[2460]: E1101 01:01:23.757607 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:01:23.757789 kubelet[2460]: E1101 01:01:23.757681 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b"} Nov 1 01:01:23.757789 kubelet[2460]: E1101 01:01:23.757752 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:23.757789 kubelet[2460]: E1101 01:01:23.757780 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6b56874c99-xwjgw" podUID="ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc" Nov 1 01:01:23.803791 env[1425]: time="2025-11-01T01:01:23.803729985Z" level=error msg="StopPodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\" failed" error="failed to destroy network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.804035 kubelet[2460]: E1101 01:01:23.803992 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:01:23.804135 kubelet[2460]: E1101 01:01:23.804056 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748"} Nov 1 01:01:23.804135 kubelet[2460]: E1101 01:01:23.804105 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"25c95b45-63cd-474c-ab3f-810f3121d2f5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:23.804274 kubelet[2460]: E1101 01:01:23.804132 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"25c95b45-63cd-474c-ab3f-810f3121d2f5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:01:23.813357 env[1425]: time="2025-11-01T01:01:23.813290892Z" level=error msg="Failed to destroy network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.813678 env[1425]: time="2025-11-01T01:01:23.813635096Z" level=error msg="encountered an error cleaning up failed sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.813764 env[1425]: time="2025-11-01T01:01:23.813706097Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hxt4l,Uid:a3eea3d5-3f7d-4258-b436-9bce8adfc837,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.813928 kubelet[2460]: E1101 01:01:23.813891 2460 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.814029 kubelet[2460]: E1101 01:01:23.813952 2460 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-hxt4l" Nov 1 01:01:23.814029 kubelet[2460]: E1101 01:01:23.813981 2460 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-hxt4l" Nov 1 01:01:23.814123 kubelet[2460]: E1101 01:01:23.814048 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:23.817310 env[1425]: time="2025-11-01T01:01:23.817251237Z" level=error msg="StopPodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\" failed" error="failed to destroy network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.817635 kubelet[2460]: E1101 01:01:23.817594 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:01:23.817742 kubelet[2460]: E1101 01:01:23.817641 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b"} Nov 1 01:01:23.817742 kubelet[2460]: E1101 01:01:23.817679 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"56dcd17c-f13d-4889-8b88-69d06e438fd0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:23.817742 kubelet[2460]: E1101 01:01:23.817706 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"56dcd17c-f13d-4889-8b88-69d06e438fd0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:01:23.820130 env[1425]: time="2025-11-01T01:01:23.820086569Z" level=error msg="StopPodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\" failed" error="failed to destroy network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.820264 kubelet[2460]: E1101 01:01:23.820232 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:01:23.820382 kubelet[2460]: E1101 01:01:23.820270 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a"} Nov 1 01:01:23.820382 kubelet[2460]: E1101 01:01:23.820302 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4e3f47c8-00e9-4d23-af1c-56111466a677\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:23.820382 kubelet[2460]: E1101 01:01:23.820348 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4e3f47c8-00e9-4d23-af1c-56111466a677\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:01:23.832855 env[1425]: time="2025-11-01T01:01:23.832813512Z" level=error msg="Failed to destroy network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.833200 env[1425]: time="2025-11-01T01:01:23.833159916Z" level=error msg="encountered an error cleaning up failed sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.833283 env[1425]: time="2025-11-01T01:01:23.833219316Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-rb8hl,Uid:83c13b51-0c6a-45c0-b7f7-16b452c52e64,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.833459 kubelet[2460]: E1101 01:01:23.833422 2460 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:23.833540 kubelet[2460]: E1101 01:01:23.833481 2460 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-rb8hl" Nov 1 01:01:23.833540 kubelet[2460]: E1101 01:01:23.833507 2460 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-rb8hl" Nov 1 01:01:23.833643 kubelet[2460]: E1101 01:01:23.833571 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-rb8hl_kube-system(83c13b51-0c6a-45c0-b7f7-16b452c52e64)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-rb8hl_kube-system(83c13b51-0c6a-45c0-b7f7-16b452c52e64)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-rb8hl" podUID="83c13b51-0c6a-45c0-b7f7-16b452c52e64" Nov 1 01:01:24.416746 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f-shm.mount: Deactivated successfully. Nov 1 01:01:24.417196 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46-shm.mount: Deactivated successfully. Nov 1 01:01:24.417316 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a-shm.mount: Deactivated successfully. Nov 1 01:01:24.640504 kubelet[2460]: I1101 01:01:24.640465 2460 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:01:24.641327 env[1425]: time="2025-11-01T01:01:24.641286228Z" level=info msg="StopPodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\"" Nov 1 01:01:24.643143 kubelet[2460]: I1101 01:01:24.643104 2460 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:01:24.643835 env[1425]: time="2025-11-01T01:01:24.643789556Z" level=info msg="StopPodSandbox for \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\"" Nov 1 01:01:24.647827 kubelet[2460]: I1101 01:01:24.647797 2460 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:01:24.648273 env[1425]: time="2025-11-01T01:01:24.648246805Z" level=info msg="StopPodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\"" Nov 1 01:01:24.649540 kubelet[2460]: I1101 01:01:24.649522 2460 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:01:24.649972 env[1425]: time="2025-11-01T01:01:24.649941324Z" level=info msg="StopPodSandbox for \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\"" Nov 1 01:01:24.709548 env[1425]: time="2025-11-01T01:01:24.709488187Z" level=error msg="StopPodSandbox for \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\" failed" error="failed to destroy network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:24.710418 kubelet[2460]: E1101 01:01:24.710127 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:01:24.710418 kubelet[2460]: E1101 01:01:24.710227 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f"} Nov 1 01:01:24.710418 kubelet[2460]: E1101 01:01:24.710299 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a3eea3d5-3f7d-4258-b436-9bce8adfc837\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:24.710418 kubelet[2460]: E1101 01:01:24.710364 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a3eea3d5-3f7d-4258-b436-9bce8adfc837\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:24.730070 env[1425]: time="2025-11-01T01:01:24.730006415Z" level=error msg="StopPodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\" failed" error="failed to destroy network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:24.730260 env[1425]: time="2025-11-01T01:01:24.730227417Z" level=error msg="StopPodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\" failed" error="failed to destroy network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:24.730884 kubelet[2460]: E1101 01:01:24.730512 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:01:24.730884 kubelet[2460]: E1101 01:01:24.730579 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a"} Nov 1 01:01:24.730884 kubelet[2460]: E1101 01:01:24.730653 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:01:24.730884 kubelet[2460]: E1101 01:01:24.730676 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f"} Nov 1 01:01:24.730884 kubelet[2460]: E1101 01:01:24.730711 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9496b934-0cb3-4fbd-9030-ca901c84f793\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:24.731137 kubelet[2460]: E1101 01:01:24.730795 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:24.731137 kubelet[2460]: E1101 01:01:24.730822 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:01:24.731137 kubelet[2460]: E1101 01:01:24.730748 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9496b934-0cb3-4fbd-9030-ca901c84f793\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-j8n8l" podUID="9496b934-0cb3-4fbd-9030-ca901c84f793" Nov 1 01:01:24.731367 env[1425]: time="2025-11-01T01:01:24.731317830Z" level=error msg="StopPodSandbox for \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\" failed" error="failed to destroy network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:24.731623 kubelet[2460]: E1101 01:01:24.731584 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:01:24.731732 kubelet[2460]: E1101 01:01:24.731631 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46"} Nov 1 01:01:24.731732 kubelet[2460]: E1101 01:01:24.731662 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"83c13b51-0c6a-45c0-b7f7-16b452c52e64\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:24.731732 kubelet[2460]: E1101 01:01:24.731690 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"83c13b51-0c6a-45c0-b7f7-16b452c52e64\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-rb8hl" podUID="83c13b51-0c6a-45c0-b7f7-16b452c52e64" Nov 1 01:01:24.779000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:24.785115 kernel: kauditd_printk_skb: 34 callbacks suppressed Nov 1 01:01:24.785205 kernel: audit: type=1400 audit(1761958884.779:996): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:24.779000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002698570 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:24.801401 kernel: audit: type=1300 audit(1761958884.779:996): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002698570 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:24.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:24.821396 kernel: audit: type=1327 audit(1761958884.779:996): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:24.838478 kernel: audit: type=1400 audit(1761958884.779:997): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:24.779000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:24.779000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012a3880 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:24.875275 kernel: audit: type=1300 audit(1761958884.779:997): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012a3880 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:24.875386 kernel: audit: type=1327 audit(1761958884.779:997): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:24.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:25.378000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:25.414996 kernel: audit: type=1400 audit(1761958885.378:998): avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:25.415134 kernel: audit: type=1400 audit(1761958885.382:999): avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:25.382000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:25.382000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0122b9f40 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:01:25.434589 kernel: audit: type=1300 audit(1761958885.382:999): arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0122b9f40 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:01:25.434708 kernel: audit: type=1327 audit(1761958885.382:999): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:01:25.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:01:25.378000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00e02b4a0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:01:25.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:01:25.444000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7410 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:25.444000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00e364d20 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:01:25.444000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:01:25.444000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7416 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:25.444000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00e364d50 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:01:25.444000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:01:25.449000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:25.449000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c009fecb60 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:01:25.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:01:25.449000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:25.449000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00e02b620 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:01:25.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:01:32.444000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:33.861729 kernel: kauditd_printk_skb: 14 callbacks suppressed Nov 1 01:01:33.861852 kernel: audit: type=1400 audit(1761958892.444:1004): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:33.861911 kernel: audit: type=1400 audit(1761958892.444:1005): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:33.861952 kernel: audit: type=1300 audit(1761958892.444:1004): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001445520 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:33.861989 kernel: audit: type=1327 audit(1761958892.444:1004): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:33.862027 kernel: audit: type=1400 audit(1761958892.445:1006): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:33.862067 kernel: audit: type=1300 audit(1761958892.445:1006): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001445880 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:33.862107 kernel: audit: type=1327 audit(1761958892.445:1006): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:33.862145 kernel: audit: type=1300 audit(1761958892.444:1005): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014f07c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:33.862189 kernel: audit: type=1327 audit(1761958892.444:1005): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:33.862227 kernel: audit: type=1400 audit(1761958892.447:1007): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:32.444000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:32.444000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001445520 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:32.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:32.445000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:32.445000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001445880 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:32.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:32.444000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014f07c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:32.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:32.447000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:01:32.447000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014f07e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:01:32.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:01:34.478580 env[1425]: time="2025-11-01T01:01:34.477179780Z" level=info msg="StopPodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\"" Nov 1 01:01:34.503418 env[1425]: time="2025-11-01T01:01:34.503360146Z" level=error msg="StopPodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\" failed" error="failed to destroy network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:34.503640 kubelet[2460]: E1101 01:01:34.503590 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:01:34.503979 kubelet[2460]: E1101 01:01:34.503658 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b"} Nov 1 01:01:34.503979 kubelet[2460]: E1101 01:01:34.503703 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"56dcd17c-f13d-4889-8b88-69d06e438fd0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:34.503979 kubelet[2460]: E1101 01:01:34.503741 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"56dcd17c-f13d-4889-8b88-69d06e438fd0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:01:36.478163 env[1425]: time="2025-11-01T01:01:36.478109939Z" level=info msg="StopPodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\"" Nov 1 01:01:36.529437 env[1425]: time="2025-11-01T01:01:36.529374451Z" level=error msg="StopPodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\" failed" error="failed to destroy network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:36.530021 kubelet[2460]: E1101 01:01:36.529836 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:01:36.530021 kubelet[2460]: E1101 01:01:36.529900 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748"} Nov 1 01:01:36.530021 kubelet[2460]: E1101 01:01:36.529944 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"25c95b45-63cd-474c-ab3f-810f3121d2f5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:36.530021 kubelet[2460]: E1101 01:01:36.529975 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"25c95b45-63cd-474c-ab3f-810f3121d2f5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:01:37.480493 env[1425]: time="2025-11-01T01:01:37.479773213Z" level=info msg="StopPodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\"" Nov 1 01:01:37.495355 env[1425]: time="2025-11-01T01:01:37.495303567Z" level=info msg="StopPodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\"" Nov 1 01:01:37.510661 env[1425]: time="2025-11-01T01:01:37.510622819Z" level=info msg="StopPodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\"" Nov 1 01:01:37.595582 env[1425]: time="2025-11-01T01:01:37.595468160Z" level=error msg="StopPodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\" failed" error="failed to destroy network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:37.596118 kubelet[2460]: E1101 01:01:37.595898 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:01:37.596118 kubelet[2460]: E1101 01:01:37.595975 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a"} Nov 1 01:01:37.596118 kubelet[2460]: E1101 01:01:37.596030 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4e3f47c8-00e9-4d23-af1c-56111466a677\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:37.596118 kubelet[2460]: E1101 01:01:37.596062 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4e3f47c8-00e9-4d23-af1c-56111466a677\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:01:37.638514 env[1425]: time="2025-11-01T01:01:37.638454386Z" level=error msg="StopPodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\" failed" error="failed to destroy network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:37.639106 kubelet[2460]: E1101 01:01:37.638924 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:01:37.639106 kubelet[2460]: E1101 01:01:37.638991 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a"} Nov 1 01:01:37.639106 kubelet[2460]: E1101 01:01:37.639032 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9496b934-0cb3-4fbd-9030-ca901c84f793\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:37.639106 kubelet[2460]: E1101 01:01:37.639071 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9496b934-0cb3-4fbd-9030-ca901c84f793\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-j8n8l" podUID="9496b934-0cb3-4fbd-9030-ca901c84f793" Nov 1 01:01:37.641007 env[1425]: time="2025-11-01T01:01:37.640898111Z" level=error msg="StopPodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\" failed" error="failed to destroy network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:37.641147 kubelet[2460]: E1101 01:01:37.641104 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:01:37.641231 kubelet[2460]: E1101 01:01:37.641159 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f"} Nov 1 01:01:37.641231 kubelet[2460]: E1101 01:01:37.641196 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:37.641409 kubelet[2460]: E1101 01:01:37.641239 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:01:38.479364 env[1425]: time="2025-11-01T01:01:38.479159688Z" level=info msg="StopPodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\"" Nov 1 01:01:38.528602 env[1425]: time="2025-11-01T01:01:38.528534674Z" level=error msg="StopPodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\" failed" error="failed to destroy network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 01:01:38.529264 kubelet[2460]: E1101 01:01:38.529218 2460 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:01:38.529442 kubelet[2460]: E1101 01:01:38.529281 2460 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b"} Nov 1 01:01:38.529442 kubelet[2460]: E1101 01:01:38.529324 2460 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 01:01:38.529442 kubelet[2460]: E1101 01:01:38.529382 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6b56874c99-xwjgw" podUID="ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc" Nov 1 01:01:38.556950 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3302915899.mount: Deactivated successfully. Nov 1 01:01:38.609092 env[1425]: time="2025-11-01T01:01:38.609044767Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:01:38.616252 env[1425]: time="2025-11-01T01:01:38.616153737Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:01:38.621416 env[1425]: time="2025-11-01T01:01:38.621321488Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:01:38.625503 env[1425]: time="2025-11-01T01:01:38.625315827Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 01:01:38.626032 env[1425]: time="2025-11-01T01:01:38.626001134Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9\"" Nov 1 01:01:38.645209 env[1425]: time="2025-11-01T01:01:38.642868500Z" level=info msg="CreateContainer within sandbox \"ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 01:01:38.717049 env[1425]: time="2025-11-01T01:01:38.716998330Z" level=info msg="CreateContainer within sandbox \"ec086f780a324d336cac4f0c34eeec9a5653c87fa237fb8b05ceea53de70e538\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"c5d9d4a6dcf8a11d3b5fb62395437ee82891fe383baaf0178d8b3e43ee8f8d36\"" Nov 1 01:01:38.717481 env[1425]: time="2025-11-01T01:01:38.717453834Z" level=info msg="StartContainer for \"c5d9d4a6dcf8a11d3b5fb62395437ee82891fe383baaf0178d8b3e43ee8f8d36\"" Nov 1 01:01:38.736276 systemd[1]: Started cri-containerd-c5d9d4a6dcf8a11d3b5fb62395437ee82891fe383baaf0178d8b3e43ee8f8d36.scope. Nov 1 01:01:38.774376 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 01:01:38.774517 kernel: audit: type=1400 audit(1761958898.755:1008): avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f4d44b982f8 items=0 ppid=2905 pid=3651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:38.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335643964346136646366386131316433623566623632333935343337 Nov 1 01:01:38.814958 kernel: audit: type=1300 audit(1761958898.755:1008): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f4d44b982f8 items=0 ppid=2905 pid=3651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:38.815169 kernel: audit: type=1327 audit(1761958898.755:1008): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335643964346136646366386131316433623566623632333935343337 Nov 1 01:01:38.815203 kernel: audit: type=1400 audit(1761958898.755:1009): avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.840354 kernel: audit: type=1400 audit(1761958898.755:1009): avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.854452 kernel: audit: type=1400 audit(1761958898.755:1009): avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.860872 env[1425]: time="2025-11-01T01:01:38.860830645Z" level=info msg="StartContainer for \"c5d9d4a6dcf8a11d3b5fb62395437ee82891fe383baaf0178d8b3e43ee8f8d36\" returns successfully" Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.881420 kernel: audit: type=1400 audit(1761958898.755:1009): avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.881510 kernel: audit: type=1400 audit(1761958898.755:1009): avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.881533 kernel: audit: type=1400 audit(1761958898.755:1009): avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.908041 kernel: audit: type=1400 audit(1761958898.755:1009): avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.755000 audit: BPF prog-id=140 op=LOAD Nov 1 01:01:38.755000 audit[3651]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024258 items=0 ppid=2905 pid=3651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:38.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335643964346136646366386131316433623566623632333935343337 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit: BPF prog-id=141 op=LOAD Nov 1 01:01:38.773000 audit[3651]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000242a8 items=0 ppid=2905 pid=3651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:38.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335643964346136646366386131316433623566623632333935343337 Nov 1 01:01:38.773000 audit: BPF prog-id=141 op=UNLOAD Nov 1 01:01:38.773000 audit: BPF prog-id=140 op=UNLOAD Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { perfmon } for pid=3651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit[3651]: AVC avc: denied { bpf } for pid=3651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:38.773000 audit: BPF prog-id=142 op=LOAD Nov 1 01:01:38.773000 audit[3651]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000024338 items=0 ppid=2905 pid=3651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:38.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335643964346136646366386131316433623566623632333935343337 Nov 1 01:01:39.290265 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 01:01:39.290444 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 01:01:39.414072 env[1425]: time="2025-11-01T01:01:39.414017561Z" level=info msg="StopPodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\"" Nov 1 01:01:39.480870 env[1425]: time="2025-11-01T01:01:39.480825514Z" level=info msg="StopPodSandbox for \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\"" Nov 1 01:01:39.481562 env[1425]: time="2025-11-01T01:01:39.481036116Z" level=info msg="StopPodSandbox for \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\"" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.531 [INFO][3703] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.532 [INFO][3703] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" iface="eth0" netns="/var/run/netns/cni-4e117018-1a37-f6a2-8a9e-743fc4b59d25" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.532 [INFO][3703] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" iface="eth0" netns="/var/run/netns/cni-4e117018-1a37-f6a2-8a9e-743fc4b59d25" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.537 [INFO][3703] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" iface="eth0" netns="/var/run/netns/cni-4e117018-1a37-f6a2-8a9e-743fc4b59d25" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.537 [INFO][3703] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.537 [INFO][3703] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.629 [INFO][3736] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.629 [INFO][3736] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.629 [INFO][3736] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.646 [WARNING][3736] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.646 [INFO][3736] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.650 [INFO][3736] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:39.656208 env[1425]: 2025-11-01 01:01:39.654 [INFO][3703] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:01:39.664178 systemd[1]: run-netns-cni\x2d4e117018\x2d1a37\x2df6a2\x2d8a9e\x2d743fc4b59d25.mount: Deactivated successfully. Nov 1 01:01:39.666477 env[1425]: time="2025-11-01T01:01:39.666418227Z" level=info msg="TearDown network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\" successfully" Nov 1 01:01:39.666635 env[1425]: time="2025-11-01T01:01:39.666611629Z" level=info msg="StopPodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\" returns successfully" Nov 1 01:01:39.719019 kubelet[2460]: I1101 01:01:39.717951 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-mcxmn" podStartSLOduration=2.122550262 podStartE2EDuration="48.71792983s" podCreationTimestamp="2025-11-01 01:00:51 +0000 UTC" firstStartedPulling="2025-11-01 01:00:52.031531575 +0000 UTC m=+22.650582115" lastFinishedPulling="2025-11-01 01:01:38.626911143 +0000 UTC m=+69.245961683" observedRunningTime="2025-11-01 01:01:39.7148528 +0000 UTC m=+70.333903340" watchObservedRunningTime="2025-11-01 01:01:39.71792983 +0000 UTC m=+70.336980370" Nov 1 01:01:39.732970 systemd[1]: run-containerd-runc-k8s.io-c5d9d4a6dcf8a11d3b5fb62395437ee82891fe383baaf0178d8b3e43ee8f8d36-runc.k3G2Fd.mount: Deactivated successfully. Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.634 [INFO][3728] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.634 [INFO][3728] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" iface="eth0" netns="/var/run/netns/cni-81596f9c-5e23-85c4-0dd0-1cfe2d7bdf53" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.635 [INFO][3728] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" iface="eth0" netns="/var/run/netns/cni-81596f9c-5e23-85c4-0dd0-1cfe2d7bdf53" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.636 [INFO][3728] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" iface="eth0" netns="/var/run/netns/cni-81596f9c-5e23-85c4-0dd0-1cfe2d7bdf53" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.636 [INFO][3728] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.636 [INFO][3728] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.736 [INFO][3749] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.741 [INFO][3749] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.742 [INFO][3749] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.754 [WARNING][3749] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.754 [INFO][3749] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.763 [INFO][3749] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:39.766329 env[1425]: 2025-11-01 01:01:39.764 [INFO][3728] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:01:39.767062 env[1425]: time="2025-11-01T01:01:39.766580806Z" level=info msg="TearDown network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\" successfully" Nov 1 01:01:39.767062 env[1425]: time="2025-11-01T01:01:39.766645706Z" level=info msg="StopPodSandbox for \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\" returns successfully" Nov 1 01:01:39.767417 env[1425]: time="2025-11-01T01:01:39.767378814Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hxt4l,Uid:a3eea3d5-3f7d-4258-b436-9bce8adfc837,Namespace:calico-system,Attempt:1,}" Nov 1 01:01:39.784198 kubelet[2460]: I1101 01:01:39.784157 2460 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vkl52\" (UniqueName: \"kubernetes.io/projected/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-kube-api-access-vkl52\") pod \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\" (UID: \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\") " Nov 1 01:01:39.784363 kubelet[2460]: I1101 01:01:39.784222 2460 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-whisker-ca-bundle\") pod \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\" (UID: \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\") " Nov 1 01:01:39.784363 kubelet[2460]: I1101 01:01:39.784260 2460 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-whisker-backend-key-pair\") pod \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\" (UID: \"ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc\") " Nov 1 01:01:39.787815 kubelet[2460]: I1101 01:01:39.787778 2460 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc" (UID: "ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 01:01:39.792884 kubelet[2460]: I1101 01:01:39.792848 2460 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-kube-api-access-vkl52" (OuterVolumeSpecName: "kube-api-access-vkl52") pod "ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc" (UID: "ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc"). InnerVolumeSpecName "kube-api-access-vkl52". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 01:01:39.793012 kubelet[2460]: I1101 01:01:39.792967 2460 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc" (UID: "ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.644 [INFO][3727] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.644 [INFO][3727] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" iface="eth0" netns="/var/run/netns/cni-85346253-602b-d791-3afc-021f6cf3caa9" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.644 [INFO][3727] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" iface="eth0" netns="/var/run/netns/cni-85346253-602b-d791-3afc-021f6cf3caa9" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.644 [INFO][3727] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" iface="eth0" netns="/var/run/netns/cni-85346253-602b-d791-3afc-021f6cf3caa9" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.644 [INFO][3727] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.644 [INFO][3727] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.769 [INFO][3755] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.769 [INFO][3755] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.774 [INFO][3755] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.791 [WARNING][3755] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.792 [INFO][3755] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.795 [INFO][3755] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:39.799496 env[1425]: 2025-11-01 01:01:39.797 [INFO][3727] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:01:39.800307 env[1425]: time="2025-11-01T01:01:39.800260135Z" level=info msg="TearDown network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\" successfully" Nov 1 01:01:39.800457 env[1425]: time="2025-11-01T01:01:39.800430937Z" level=info msg="StopPodSandbox for \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\" returns successfully" Nov 1 01:01:39.801246 env[1425]: time="2025-11-01T01:01:39.801178844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-rb8hl,Uid:83c13b51-0c6a-45c0-b7f7-16b452c52e64,Namespace:kube-system,Attempt:1,}" Nov 1 01:01:39.885023 kubelet[2460]: I1101 01:01:39.884928 2460 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-9d78d981c4\" DevicePath \"\"" Nov 1 01:01:39.885023 kubelet[2460]: I1101 01:01:39.884962 2460 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-vkl52\" (UniqueName: \"kubernetes.io/projected/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-kube-api-access-vkl52\") on node \"ci-3510.3.8-n-9d78d981c4\" DevicePath \"\"" Nov 1 01:01:39.885023 kubelet[2460]: I1101 01:01:39.884977 2460 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc-whisker-ca-bundle\") on node \"ci-3510.3.8-n-9d78d981c4\" DevicePath \"\"" Nov 1 01:01:39.991447 systemd[1]: Removed slice kubepods-besteffort-podef80cd40_70f4_4c6a_8c97_25e5c1d10fdc.slice. Nov 1 01:01:40.046204 systemd-networkd[1577]: calidf9769f6524: Link UP Nov 1 01:01:40.057008 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 01:01:40.057123 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidf9769f6524: link becomes ready Nov 1 01:01:40.059964 systemd-networkd[1577]: calidf9769f6524: Gained carrier Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.852 [INFO][3784] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.873 [INFO][3784] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0 csi-node-driver- calico-system a3eea3d5-3f7d-4258-b436-9bce8adfc837 931 0 2025-11-01 01:00:51 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-9d78d981c4 csi-node-driver-hxt4l eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calidf9769f6524 [] [] }} ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Namespace="calico-system" Pod="csi-node-driver-hxt4l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.873 [INFO][3784] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Namespace="calico-system" Pod="csi-node-driver-hxt4l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.950 [INFO][3806] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" HandleID="k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.950 [INFO][3806] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" HandleID="k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251930), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-9d78d981c4", "pod":"csi-node-driver-hxt4l", "timestamp":"2025-11-01 01:01:39.950075099 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9d78d981c4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.950 [INFO][3806] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.950 [INFO][3806] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.950 [INFO][3806] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9d78d981c4' Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.968 [INFO][3806] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.974 [INFO][3806] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.978 [INFO][3806] ipam/ipam.go 511: Trying affinity for 192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.980 [INFO][3806] ipam/ipam.go 158: Attempting to load block cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.982 [INFO][3806] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.982 [INFO][3806] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.95.0/26 handle="k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.984 [INFO][3806] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:39.993 [INFO][3806] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.95.0/26 handle="k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:40.000 [INFO][3806] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.95.1/26] block=192.168.95.0/26 handle="k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:40.001 [INFO][3806] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.95.1/26] handle="k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:40.001 [INFO][3806] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:40.080669 env[1425]: 2025-11-01 01:01:40.001 [INFO][3806] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.95.1/26] IPv6=[] ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" HandleID="k8s-pod-network.a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:40.081974 env[1425]: 2025-11-01 01:01:40.004 [INFO][3784] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Namespace="calico-system" Pod="csi-node-driver-hxt4l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a3eea3d5-3f7d-4258-b436-9bce8adfc837", ResourceVersion:"931", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"", Pod:"csi-node-driver-hxt4l", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.95.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidf9769f6524", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:40.081974 env[1425]: 2025-11-01 01:01:40.004 [INFO][3784] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.95.1/32] ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Namespace="calico-system" Pod="csi-node-driver-hxt4l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:40.081974 env[1425]: 2025-11-01 01:01:40.004 [INFO][3784] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidf9769f6524 ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Namespace="calico-system" Pod="csi-node-driver-hxt4l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:40.081974 env[1425]: 2025-11-01 01:01:40.060 [INFO][3784] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Namespace="calico-system" Pod="csi-node-driver-hxt4l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:40.081974 env[1425]: 2025-11-01 01:01:40.060 [INFO][3784] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Namespace="calico-system" Pod="csi-node-driver-hxt4l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a3eea3d5-3f7d-4258-b436-9bce8adfc837", ResourceVersion:"931", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc", Pod:"csi-node-driver-hxt4l", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.95.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidf9769f6524", MAC:"d6:8d:c8:f7:e7:3e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:40.081974 env[1425]: 2025-11-01 01:01:40.079 [INFO][3784] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc" Namespace="calico-system" Pod="csi-node-driver-hxt4l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:01:40.104139 env[1425]: time="2025-11-01T01:01:40.104062596Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:01:40.104139 env[1425]: time="2025-11-01T01:01:40.104112597Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:01:40.104459 env[1425]: time="2025-11-01T01:01:40.104125697Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:01:40.104706 env[1425]: time="2025-11-01T01:01:40.104660702Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc pid=3848 runtime=io.containerd.runc.v2 Nov 1 01:01:40.127462 systemd[1]: Created slice kubepods-besteffort-pod2f749ad0_ece1_40aa_a58b_ea98337dd49c.slice. Nov 1 01:01:40.140995 systemd[1]: Started cri-containerd-a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc.scope. Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.182000 audit: BPF prog-id=143 op=LOAD Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3848 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663536613163303837363061326331373539376565356363343730 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3848 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663536613163303837363061326331373539376565356363343730 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit: BPF prog-id=144 op=LOAD Nov 1 01:01:40.183000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003c60b0 items=0 ppid=3848 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663536613163303837363061326331373539376565356363343730 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit: BPF prog-id=145 op=LOAD Nov 1 01:01:40.183000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003c60f8 items=0 ppid=3848 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663536613163303837363061326331373539376565356363343730 Nov 1 01:01:40.183000 audit: BPF prog-id=145 op=UNLOAD Nov 1 01:01:40.183000 audit: BPF prog-id=144 op=UNLOAD Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { perfmon } for pid=3858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit[3858]: AVC avc: denied { bpf } for pid=3858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.183000 audit: BPF prog-id=146 op=LOAD Nov 1 01:01:40.183000 audit[3858]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003c6508 items=0 ppid=3848 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136663536613163303837363061326331373539376565356363343730 Nov 1 01:01:40.189171 kubelet[2460]: I1101 01:01:40.189025 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2f749ad0-ece1-40aa-a58b-ea98337dd49c-whisker-ca-bundle\") pod \"whisker-fd5b94c59-v79cj\" (UID: \"2f749ad0-ece1-40aa-a58b-ea98337dd49c\") " pod="calico-system/whisker-fd5b94c59-v79cj" Nov 1 01:01:40.189171 kubelet[2460]: I1101 01:01:40.189088 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x96sc\" (UniqueName: \"kubernetes.io/projected/2f749ad0-ece1-40aa-a58b-ea98337dd49c-kube-api-access-x96sc\") pod \"whisker-fd5b94c59-v79cj\" (UID: \"2f749ad0-ece1-40aa-a58b-ea98337dd49c\") " pod="calico-system/whisker-fd5b94c59-v79cj" Nov 1 01:01:40.189171 kubelet[2460]: I1101 01:01:40.189128 2460 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2f749ad0-ece1-40aa-a58b-ea98337dd49c-whisker-backend-key-pair\") pod \"whisker-fd5b94c59-v79cj\" (UID: \"2f749ad0-ece1-40aa-a58b-ea98337dd49c\") " pod="calico-system/whisker-fd5b94c59-v79cj" Nov 1 01:01:40.204154 systemd-networkd[1577]: calicebba79ad4a: Link UP Nov 1 01:01:40.215370 env[1425]: time="2025-11-01T01:01:40.215323276Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hxt4l,Uid:a3eea3d5-3f7d-4258-b436-9bce8adfc837,Namespace:calico-system,Attempt:1,} returns sandbox id \"a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc\"" Nov 1 01:01:40.218429 env[1425]: time="2025-11-01T01:01:40.218402406Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 01:01:40.220884 systemd-networkd[1577]: calicebba79ad4a: Gained carrier Nov 1 01:01:40.222515 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicebba79ad4a: link becomes ready Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:39.938 [INFO][3799] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:39.974 [INFO][3799] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0 coredns-668d6bf9bc- kube-system 83c13b51-0c6a-45c0-b7f7-16b452c52e64 932 0 2025-11-01 01:00:34 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-9d78d981c4 coredns-668d6bf9bc-rb8hl eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calicebba79ad4a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Namespace="kube-system" Pod="coredns-668d6bf9bc-rb8hl" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:39.974 [INFO][3799] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Namespace="kube-system" Pod="coredns-668d6bf9bc-rb8hl" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.025 [INFO][3826] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" HandleID="k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.025 [INFO][3826] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" HandleID="k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9590), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-9d78d981c4", "pod":"coredns-668d6bf9bc-rb8hl", "timestamp":"2025-11-01 01:01:40.025760637 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9d78d981c4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.026 [INFO][3826] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.026 [INFO][3826] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.026 [INFO][3826] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9d78d981c4' Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.075 [INFO][3826] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.088 [INFO][3826] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.162 [INFO][3826] ipam/ipam.go 511: Trying affinity for 192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.167 [INFO][3826] ipam/ipam.go 158: Attempting to load block cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.172 [INFO][3826] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.172 [INFO][3826] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.95.0/26 handle="k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.174 [INFO][3826] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.179 [INFO][3826] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.95.0/26 handle="k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.193 [INFO][3826] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.95.2/26] block=192.168.95.0/26 handle="k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.193 [INFO][3826] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.95.2/26] handle="k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.193 [INFO][3826] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:40.243232 env[1425]: 2025-11-01 01:01:40.193 [INFO][3826] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.95.2/26] IPv6=[] ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" HandleID="k8s-pod-network.9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:40.244298 env[1425]: 2025-11-01 01:01:40.195 [INFO][3799] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Namespace="kube-system" Pod="coredns-668d6bf9bc-rb8hl" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"83c13b51-0c6a-45c0-b7f7-16b452c52e64", ResourceVersion:"932", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"", Pod:"coredns-668d6bf9bc-rb8hl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.95.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicebba79ad4a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:40.244298 env[1425]: 2025-11-01 01:01:40.195 [INFO][3799] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.95.2/32] ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Namespace="kube-system" Pod="coredns-668d6bf9bc-rb8hl" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:40.244298 env[1425]: 2025-11-01 01:01:40.195 [INFO][3799] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicebba79ad4a ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Namespace="kube-system" Pod="coredns-668d6bf9bc-rb8hl" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:40.244298 env[1425]: 2025-11-01 01:01:40.221 [INFO][3799] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Namespace="kube-system" Pod="coredns-668d6bf9bc-rb8hl" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:40.244298 env[1425]: 2025-11-01 01:01:40.221 [INFO][3799] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Namespace="kube-system" Pod="coredns-668d6bf9bc-rb8hl" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"83c13b51-0c6a-45c0-b7f7-16b452c52e64", ResourceVersion:"932", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e", Pod:"coredns-668d6bf9bc-rb8hl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.95.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicebba79ad4a", MAC:"3a:0b:b3:1e:9e:b7", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:40.244298 env[1425]: 2025-11-01 01:01:40.241 [INFO][3799] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e" Namespace="kube-system" Pod="coredns-668d6bf9bc-rb8hl" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:01:40.264569 env[1425]: time="2025-11-01T01:01:40.264394852Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:01:40.264569 env[1425]: time="2025-11-01T01:01:40.264442252Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:01:40.264569 env[1425]: time="2025-11-01T01:01:40.264451652Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:01:40.265305 env[1425]: time="2025-11-01T01:01:40.264615154Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e pid=3897 runtime=io.containerd.runc.v2 Nov 1 01:01:40.276851 systemd[1]: Started cri-containerd-9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e.scope. Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.290000 audit: BPF prog-id=147 op=LOAD Nov 1 01:01:40.291000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.291000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3897 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931323133313063636433643961633165333664383663643237646131 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3897 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931323133313063636433643961633165333664383663643237646131 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.292000 audit: BPF prog-id=148 op=LOAD Nov 1 01:01:40.292000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00018dfd0 items=0 ppid=3897 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931323133313063636433643961633165333664383663643237646131 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.293000 audit: BPF prog-id=149 op=LOAD Nov 1 01:01:40.293000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001c4018 items=0 ppid=3897 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931323133313063636433643961633165333664383663643237646131 Nov 1 01:01:40.294000 audit: BPF prog-id=149 op=UNLOAD Nov 1 01:01:40.294000 audit: BPF prog-id=148 op=UNLOAD Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.294000 audit: BPF prog-id=150 op=LOAD Nov 1 01:01:40.294000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001c4428 items=0 ppid=3897 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931323133313063636433643961633165333664383663643237646131 Nov 1 01:01:40.327962 env[1425]: time="2025-11-01T01:01:40.327919168Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-rb8hl,Uid:83c13b51-0c6a-45c0-b7f7-16b452c52e64,Namespace:kube-system,Attempt:1,} returns sandbox id \"9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e\"" Nov 1 01:01:40.332215 env[1425]: time="2025-11-01T01:01:40.332184310Z" level=info msg="CreateContainer within sandbox \"9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 01:01:40.362859 env[1425]: time="2025-11-01T01:01:40.362817407Z" level=info msg="CreateContainer within sandbox \"9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"0f584384cfb25e6cbd4d787b6132dc80a561c58c06db73d47a462dba97329d01\"" Nov 1 01:01:40.363508 env[1425]: time="2025-11-01T01:01:40.363473413Z" level=info msg="StartContainer for \"0f584384cfb25e6cbd4d787b6132dc80a561c58c06db73d47a462dba97329d01\"" Nov 1 01:01:40.384747 systemd[1]: Started cri-containerd-0f584384cfb25e6cbd4d787b6132dc80a561c58c06db73d47a462dba97329d01.scope. Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.398000 audit: BPF prog-id=151 op=LOAD Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=3897 pid=3941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353834333834636662323565366362643464373837623631333264 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00023d6b0 a2=3c a3=8 items=0 ppid=3897 pid=3941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353834333834636662323565366362643464373837623631333264 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit: BPF prog-id=152 op=LOAD Nov 1 01:01:40.399000 audit[3941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023d9d8 a2=78 a3=c0003a4490 items=0 ppid=3897 pid=3941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353834333834636662323565366362643464373837623631333264 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit: BPF prog-id=153 op=LOAD Nov 1 01:01:40.399000 audit[3941]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023d770 a2=78 a3=c0003a44d8 items=0 ppid=3897 pid=3941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353834333834636662323565366362643464373837623631333264 Nov 1 01:01:40.399000 audit: BPF prog-id=153 op=UNLOAD Nov 1 01:01:40.399000 audit: BPF prog-id=152 op=UNLOAD Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { perfmon } for pid=3941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit[3941]: AVC avc: denied { bpf } for pid=3941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.399000 audit: BPF prog-id=154 op=LOAD Nov 1 01:01:40.399000 audit[3941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023dc30 a2=78 a3=c0003a48e8 items=0 ppid=3897 pid=3941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353834333834636662323565366362643464373837623631333264 Nov 1 01:01:40.420602 env[1425]: time="2025-11-01T01:01:40.420559667Z" level=info msg="StartContainer for \"0f584384cfb25e6cbd4d787b6132dc80a561c58c06db73d47a462dba97329d01\" returns successfully" Nov 1 01:01:40.430000 audit[3952]: AVC avc: denied { getattr } for pid=3952 comm="coredns" path="cgroup:[4026532604]" dev="nsfs" ino=4026532604 scontext=system_u:system_r:svirt_lxc_net_t:s0:c735,c802 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 01:01:40.430000 audit[3952]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a9a8 a2=c0004ee858 a3=0 items=0 ppid=3897 pid=3952 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c735,c802 key=(null) Nov 1 01:01:40.430000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 01:01:40.453405 env[1425]: time="2025-11-01T01:01:40.453351985Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-fd5b94c59-v79cj,Uid:2f749ad0-ece1-40aa-a58b-ea98337dd49c,Namespace:calico-system,Attempt:0,}" Nov 1 01:01:40.529217 env[1425]: time="2025-11-01T01:01:40.524210973Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:40.531927 env[1425]: time="2025-11-01T01:01:40.531827946Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 01:01:40.532352 kubelet[2460]: E1101 01:01:40.532158 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:01:40.532352 kubelet[2460]: E1101 01:01:40.532207 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:01:40.532762 kubelet[2460]: E1101 01:01:40.532516 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:40.535708 env[1425]: time="2025-11-01T01:01:40.535682484Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 01:01:40.570294 systemd[1]: run-netns-cni\x2d81596f9c\x2d5e23\x2d85c4\x2d0dd0\x2d1cfe2d7bdf53.mount: Deactivated successfully. Nov 1 01:01:40.570623 systemd[1]: run-netns-cni\x2d85346253\x2d602b\x2dd791\x2d3afc\x2d021f6cf3caa9.mount: Deactivated successfully. Nov 1 01:01:40.570778 systemd[1]: var-lib-kubelet-pods-ef80cd40\x2d70f4\x2d4c6a\x2d8c97\x2d25e5c1d10fdc-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvkl52.mount: Deactivated successfully. Nov 1 01:01:40.570955 systemd[1]: var-lib-kubelet-pods-ef80cd40\x2d70f4\x2d4c6a\x2d8c97\x2d25e5c1d10fdc-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 01:01:40.614161 systemd-networkd[1577]: cali3ecdb6bda02: Link UP Nov 1 01:01:40.619748 systemd-networkd[1577]: cali3ecdb6bda02: Gained carrier Nov 1 01:01:40.620479 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3ecdb6bda02: link becomes ready Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.515 [INFO][3972] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.526 [INFO][3972] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0 whisker-fd5b94c59- calico-system 2f749ad0-ece1-40aa-a58b-ea98337dd49c 959 0 2025-11-01 01:01:40 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:fd5b94c59 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-9d78d981c4 whisker-fd5b94c59-v79cj eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali3ecdb6bda02 [] [] }} ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Namespace="calico-system" Pod="whisker-fd5b94c59-v79cj" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.526 [INFO][3972] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Namespace="calico-system" Pod="whisker-fd5b94c59-v79cj" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.580 [INFO][3986] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" HandleID="k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.580 [INFO][3986] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" HandleID="k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccfe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-9d78d981c4", "pod":"whisker-fd5b94c59-v79cj", "timestamp":"2025-11-01 01:01:40.580012514 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9d78d981c4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.580 [INFO][3986] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.580 [INFO][3986] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.580 [INFO][3986] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9d78d981c4' Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.585 [INFO][3986] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.589 [INFO][3986] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.593 [INFO][3986] ipam/ipam.go 511: Trying affinity for 192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.595 [INFO][3986] ipam/ipam.go 158: Attempting to load block cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.596 [INFO][3986] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.596 [INFO][3986] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.95.0/26 handle="k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.597 [INFO][3986] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6 Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.602 [INFO][3986] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.95.0/26 handle="k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.610 [INFO][3986] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.95.3/26] block=192.168.95.0/26 handle="k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.610 [INFO][3986] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.95.3/26] handle="k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.610 [INFO][3986] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:40.642027 env[1425]: 2025-11-01 01:01:40.610 [INFO][3986] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.95.3/26] IPv6=[] ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" HandleID="k8s-pod-network.0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" Nov 1 01:01:40.642763 env[1425]: 2025-11-01 01:01:40.611 [INFO][3972] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Namespace="calico-system" Pod="whisker-fd5b94c59-v79cj" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0", GenerateName:"whisker-fd5b94c59-", Namespace:"calico-system", SelfLink:"", UID:"2f749ad0-ece1-40aa-a58b-ea98337dd49c", ResourceVersion:"959", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 1, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"fd5b94c59", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"", Pod:"whisker-fd5b94c59-v79cj", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.95.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3ecdb6bda02", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:40.642763 env[1425]: 2025-11-01 01:01:40.612 [INFO][3972] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.95.3/32] ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Namespace="calico-system" Pod="whisker-fd5b94c59-v79cj" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" Nov 1 01:01:40.642763 env[1425]: 2025-11-01 01:01:40.612 [INFO][3972] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3ecdb6bda02 ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Namespace="calico-system" Pod="whisker-fd5b94c59-v79cj" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" Nov 1 01:01:40.642763 env[1425]: 2025-11-01 01:01:40.620 [INFO][3972] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Namespace="calico-system" Pod="whisker-fd5b94c59-v79cj" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" Nov 1 01:01:40.642763 env[1425]: 2025-11-01 01:01:40.625 [INFO][3972] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Namespace="calico-system" Pod="whisker-fd5b94c59-v79cj" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0", GenerateName:"whisker-fd5b94c59-", Namespace:"calico-system", SelfLink:"", UID:"2f749ad0-ece1-40aa-a58b-ea98337dd49c", ResourceVersion:"959", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 1, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"fd5b94c59", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6", Pod:"whisker-fd5b94c59-v79cj", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.95.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3ecdb6bda02", MAC:"0e:be:b3:77:af:ab", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:40.642763 env[1425]: 2025-11-01 01:01:40.640 [INFO][3972] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6" Namespace="calico-system" Pod="whisker-fd5b94c59-v79cj" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--fd5b94c59--v79cj-eth0" Nov 1 01:01:40.662613 env[1425]: time="2025-11-01T01:01:40.662545315Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:01:40.663026 env[1425]: time="2025-11-01T01:01:40.662581315Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:01:40.663026 env[1425]: time="2025-11-01T01:01:40.662594915Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:01:40.663026 env[1425]: time="2025-11-01T01:01:40.662758217Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6 pid=4004 runtime=io.containerd.runc.v2 Nov 1 01:01:40.685852 systemd[1]: run-containerd-runc-k8s.io-0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6-runc.ggTmQY.mount: Deactivated successfully. Nov 1 01:01:40.697405 systemd[1]: Started cri-containerd-0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6.scope. Nov 1 01:01:40.740432 kubelet[2460]: I1101 01:01:40.740367 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-rb8hl" podStartSLOduration=66.740322769 podStartE2EDuration="1m6.740322769s" podCreationTimestamp="2025-11-01 01:00:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 01:01:40.715072924 +0000 UTC m=+71.334123364" watchObservedRunningTime="2025-11-01 01:01:40.740322769 +0000 UTC m=+71.359373209" Nov 1 01:01:40.750000 audit[4048]: NETFILTER_CFG table=filter:110 family=2 entries=20 op=nft_register_rule pid=4048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:40.750000 audit[4048]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc920e8950 a2=0 a3=7ffc920e893c items=0 ppid=2565 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.750000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:40.757000 audit[4048]: NETFILTER_CFG table=nat:111 family=2 entries=14 op=nft_register_rule pid=4048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:40.757000 audit[4048]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc920e8950 a2=0 a3=0 items=0 ppid=2565 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.757000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.771000 audit: BPF prog-id=155 op=LOAD Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4004 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616164303337643262306434363433333634373364303835653937 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4004 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616164303337643262306434363433333634373364303835653937 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit: BPF prog-id=156 op=LOAD Nov 1 01:01:40.772000 audit[4015]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003d45b0 items=0 ppid=4004 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616164303337643262306434363433333634373364303835653937 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit: BPF prog-id=157 op=LOAD Nov 1 01:01:40.772000 audit[4015]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003d45f8 items=0 ppid=4004 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616164303337643262306434363433333634373364303835653937 Nov 1 01:01:40.772000 audit: BPF prog-id=157 op=UNLOAD Nov 1 01:01:40.772000 audit: BPF prog-id=156 op=UNLOAD Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:40.772000 audit: BPF prog-id=158 op=LOAD Nov 1 01:01:40.772000 audit[4015]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003d4a08 items=0 ppid=4004 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616164303337643262306434363433333634373364303835653937 Nov 1 01:01:40.800832 env[1425]: time="2025-11-01T01:01:40.800784656Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:40.800000 audit[4054]: NETFILTER_CFG table=filter:112 family=2 entries=17 op=nft_register_rule pid=4054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:40.800000 audit[4054]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe73c52cb0 a2=0 a3=7ffe73c52c9c items=0 ppid=2565 pid=4054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.800000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:40.814735 env[1425]: time="2025-11-01T01:01:40.814676891Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 01:01:40.816755 kubelet[2460]: E1101 01:01:40.816181 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:01:40.816755 kubelet[2460]: E1101 01:01:40.816245 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:01:40.816755 kubelet[2460]: E1101 01:01:40.816461 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:40.817935 kubelet[2460]: E1101 01:01:40.817862 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:40.822000 audit[4054]: NETFILTER_CFG table=nat:113 family=2 entries=35 op=nft_register_chain pid=4054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:40.822000 audit[4054]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe73c52cb0 a2=0 a3=7ffe73c52c9c items=0 ppid=2565 pid=4054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.822000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:40.839507 env[1425]: time="2025-11-01T01:01:40.838683824Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-fd5b94c59-v79cj,Uid:2f749ad0-ece1-40aa-a58b-ea98337dd49c,Namespace:calico-system,Attempt:0,} returns sandbox id \"0caad037d2b0d464336473d085e97f136051e4bab23f88efaf00fd57810213a6\"" Nov 1 01:01:40.844078 env[1425]: time="2025-11-01T01:01:40.844044176Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 01:01:40.967000 audit[4091]: AVC avc: denied { write } for pid=4091 comm="tee" name="fd" dev="proc" ino=32615 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 01:01:40.967000 audit[4091]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc26aef7c3 a2=241 a3=1b6 items=1 ppid=4070 pid=4091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:40.967000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 01:01:40.967000 audit: PATH item=0 name="/dev/fd/63" inode=32611 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 01:01:40.967000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 01:01:41.001000 audit[4108]: AVC avc: denied { write } for pid=4108 comm="tee" name="fd" dev="proc" ino=33334 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 01:01:41.005000 audit[4106]: AVC avc: denied { write } for pid=4106 comm="tee" name="fd" dev="proc" ino=33339 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 01:01:41.012000 audit[4111]: AVC avc: denied { write } for pid=4111 comm="tee" name="fd" dev="proc" ino=33346 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 01:01:41.001000 audit[4108]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdff6bd7d3 a2=241 a3=1b6 items=1 ppid=4072 pid=4108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.001000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 01:01:41.001000 audit: PATH item=0 name="/dev/fd/63" inode=33326 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 01:01:41.001000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 01:01:41.005000 audit[4106]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff90c817d3 a2=241 a3=1b6 items=1 ppid=4079 pid=4106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.005000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 01:01:41.005000 audit: PATH item=0 name="/dev/fd/63" inode=32621 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 01:01:41.005000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 01:01:41.012000 audit[4111]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe6aef77d3 a2=241 a3=1b6 items=1 ppid=4084 pid=4111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.012000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 01:01:41.012000 audit: PATH item=0 name="/dev/fd/63" inode=33331 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 01:01:41.012000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 01:01:41.032000 audit[4128]: AVC avc: denied { write } for pid=4128 comm="tee" name="fd" dev="proc" ino=33363 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 01:01:41.034000 audit[4130]: AVC avc: denied { write } for pid=4130 comm="tee" name="fd" dev="proc" ino=33366 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 01:01:41.042000 audit[4136]: AVC avc: denied { write } for pid=4136 comm="tee" name="fd" dev="proc" ino=33370 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 01:01:41.032000 audit[4128]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffb34507d5 a2=241 a3=1b6 items=1 ppid=4077 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.034000 audit[4130]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe1c2417d4 a2=241 a3=1b6 items=1 ppid=4075 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.032000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 01:01:41.032000 audit: PATH item=0 name="/dev/fd/63" inode=33349 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 01:01:41.034000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 01:01:41.032000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 01:01:41.034000 audit: PATH item=0 name="/dev/fd/63" inode=33352 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 01:01:41.034000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 01:01:41.042000 audit[4136]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffa59f47c4 a2=241 a3=1b6 items=1 ppid=4086 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.042000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 01:01:41.042000 audit: PATH item=0 name="/dev/fd/63" inode=33359 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 01:01:41.042000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 01:01:41.109744 env[1425]: time="2025-11-01T01:01:41.109692346Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:41.114116 env[1425]: time="2025-11-01T01:01:41.114049188Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 01:01:41.114590 kubelet[2460]: E1101 01:01:41.114324 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:01:41.114590 kubelet[2460]: E1101 01:01:41.114394 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:01:41.114590 kubelet[2460]: E1101 01:01:41.114525 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a7462746e0174c6e871c02909e388a73,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:41.116933 env[1425]: time="2025-11-01T01:01:41.116890415Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit: BPF prog-id=159 op=LOAD Nov 1 01:01:41.346000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdd5ced9d0 a2=98 a3=1fffffffffffffff items=0 ppid=4073 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.346000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 01:01:41.346000 audit: BPF prog-id=159 op=UNLOAD Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit: BPF prog-id=160 op=LOAD Nov 1 01:01:41.346000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdd5ced8b0 a2=94 a3=3 items=0 ppid=4073 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.346000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 01:01:41.346000 audit: BPF prog-id=160 op=UNLOAD Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit: BPF prog-id=161 op=LOAD Nov 1 01:01:41.346000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdd5ced8f0 a2=94 a3=7ffdd5cedad0 items=0 ppid=4073 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.346000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 01:01:41.346000 audit: BPF prog-id=161 op=UNLOAD Nov 1 01:01:41.346000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.346000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffdd5ced9c0 a2=50 a3=a000000085 items=0 ppid=4073 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.346000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.349000 audit: BPF prog-id=162 op=LOAD Nov 1 01:01:41.349000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff6c01c290 a2=98 a3=3 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.349000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.350000 audit: BPF prog-id=162 op=UNLOAD Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.350000 audit: BPF prog-id=163 op=LOAD Nov 1 01:01:41.350000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff6c01c080 a2=94 a3=54428f items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.350000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.351000 audit: BPF prog-id=163 op=UNLOAD Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.351000 audit: BPF prog-id=164 op=LOAD Nov 1 01:01:41.351000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff6c01c0b0 a2=94 a3=2 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.351000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.351000 audit: BPF prog-id=164 op=UNLOAD Nov 1 01:01:41.384576 env[1425]: time="2025-11-01T01:01:41.384521993Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:41.391871 env[1425]: time="2025-11-01T01:01:41.391811664Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 01:01:41.392093 kubelet[2460]: E1101 01:01:41.392056 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:01:41.392188 kubelet[2460]: E1101 01:01:41.392117 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:01:41.392316 kubelet[2460]: E1101 01:01:41.392279 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:41.393521 kubelet[2460]: E1101 01:01:41.393467 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:01:41.479556 kubelet[2460]: I1101 01:01:41.479513 2460 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc" path="/var/lib/kubelet/pods/ef80cd40-70f4-4c6a-8c97-25e5c1d10fdc/volumes" Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit: BPF prog-id=165 op=LOAD Nov 1 01:01:41.481000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff6c01bf70 a2=94 a3=1 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.481000 audit: BPF prog-id=165 op=UNLOAD Nov 1 01:01:41.481000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.481000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff6c01c040 a2=50 a3=7fff6c01c120 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.481000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.491000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.491000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6c01bf80 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.491000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6c01bfb0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6c01bec0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6c01bfd0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6c01bfb0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6c01bfa0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6c01bfd0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6c01bfb0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6c01bfd0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff6c01bfa0 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff6c01c010 a2=28 a3=0 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff6c01bdc0 a2=50 a3=1 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit: BPF prog-id=166 op=LOAD Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff6c01bdc0 a2=94 a3=5 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit: BPF prog-id=166 op=UNLOAD Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff6c01be70 a2=50 a3=1 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff6c01bf90 a2=4 a3=38 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.492000 audit[4180]: AVC avc: denied { confidentiality } for pid=4180 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 01:01:41.492000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff6c01bfe0 a2=94 a3=6 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.492000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { confidentiality } for pid=4180 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 01:01:41.493000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff6c01b790 a2=94 a3=88 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.493000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { perfmon } for pid=4180 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { bpf } for pid=4180 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.493000 audit[4180]: AVC avc: denied { confidentiality } for pid=4180 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 01:01:41.493000 audit[4180]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff6c01b790 a2=94 a3=88 items=0 ppid=4073 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.493000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit: BPF prog-id=167 op=LOAD Nov 1 01:01:41.502000 audit[4183]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd89dec400 a2=98 a3=1999999999999999 items=0 ppid=4073 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.502000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 01:01:41.502000 audit: BPF prog-id=167 op=UNLOAD Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit: BPF prog-id=168 op=LOAD Nov 1 01:01:41.502000 audit[4183]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd89dec2e0 a2=94 a3=ffff items=0 ppid=4073 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.502000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 01:01:41.502000 audit: BPF prog-id=168 op=UNLOAD Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.502000 audit: BPF prog-id=169 op=LOAD Nov 1 01:01:41.502000 audit[4183]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd89dec320 a2=94 a3=7ffd89dec500 items=0 ppid=4073 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.502000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 01:01:41.502000 audit: BPF prog-id=169 op=UNLOAD Nov 1 01:01:41.521483 systemd-networkd[1577]: calidf9769f6524: Gained IPv6LL Nov 1 01:01:41.560859 systemd[1]: run-containerd-runc-k8s.io-c5d9d4a6dcf8a11d3b5fb62395437ee82891fe383baaf0178d8b3e43ee8f8d36-runc.JeWKgT.mount: Deactivated successfully. Nov 1 01:01:41.637645 systemd-networkd[1577]: vxlan.calico: Link UP Nov 1 01:01:41.637656 systemd-networkd[1577]: vxlan.calico: Gained carrier Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit: BPF prog-id=170 op=LOAD Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc8ee0af00 a2=98 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit: BPF prog-id=170 op=UNLOAD Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit: BPF prog-id=171 op=LOAD Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc8ee0ad10 a2=94 a3=54428f items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit: BPF prog-id=171 op=UNLOAD Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit: BPF prog-id=172 op=LOAD Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc8ee0ad40 a2=94 a3=2 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit: BPF prog-id=172 op=UNLOAD Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc8ee0ac10 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8ee0ac40 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8ee0ab50 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc8ee0ac60 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc8ee0ac40 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc8ee0ac30 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc8ee0ac60 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8ee0ac40 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8ee0ac60 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc8ee0ac30 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.655000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.655000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc8ee0aca0 a2=28 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.656000 audit: BPF prog-id=173 op=LOAD Nov 1 01:01:41.656000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc8ee0ab10 a2=94 a3=0 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.656000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.656000 audit: BPF prog-id=173 op=UNLOAD Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc8ee0ab00 a2=50 a3=2800 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.657000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc8ee0ab00 a2=50 a3=2800 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.657000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit: BPF prog-id=174 op=LOAD Nov 1 01:01:41.657000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc8ee0a320 a2=94 a3=2 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.657000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.657000 audit: BPF prog-id=174 op=UNLOAD Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { perfmon } for pid=4207 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit[4207]: AVC avc: denied { bpf } for pid=4207 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.657000 audit: BPF prog-id=175 op=LOAD Nov 1 01:01:41.657000 audit[4207]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc8ee0a420 a2=94 a3=30 items=0 ppid=4073 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.657000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit: BPF prog-id=176 op=LOAD Nov 1 01:01:41.660000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe0977b310 a2=98 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.660000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.660000 audit: BPF prog-id=176 op=UNLOAD Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit: BPF prog-id=177 op=LOAD Nov 1 01:01:41.660000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe0977b100 a2=94 a3=54428f items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.660000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.660000 audit: BPF prog-id=177 op=UNLOAD Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.660000 audit: BPF prog-id=178 op=LOAD Nov 1 01:01:41.660000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe0977b130 a2=94 a3=2 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.660000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.660000 audit: BPF prog-id=178 op=UNLOAD Nov 1 01:01:41.705353 kubelet[2460]: E1101 01:01:41.705292 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:01:41.705692 kubelet[2460]: E1101 01:01:41.705416 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:01:41.714115 systemd-networkd[1577]: cali3ecdb6bda02: Gained IPv6LL Nov 1 01:01:41.788000 audit[4216]: NETFILTER_CFG table=filter:114 family=2 entries=14 op=nft_register_rule pid=4216 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:41.788000 audit[4216]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc0b3e9850 a2=0 a3=7ffc0b3e983c items=0 ppid=2565 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.788000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:41.794000 audit[4216]: NETFILTER_CFG table=nat:115 family=2 entries=20 op=nft_register_rule pid=4216 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:41.794000 audit[4216]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc0b3e9850 a2=0 a3=7ffc0b3e983c items=0 ppid=2565 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.794000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit: BPF prog-id=179 op=LOAD Nov 1 01:01:41.838000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe0977aff0 a2=94 a3=1 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.838000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.838000 audit: BPF prog-id=179 op=UNLOAD Nov 1 01:01:41.838000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.838000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe0977b0c0 a2=50 a3=7ffe0977b1a0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.838000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.842507 systemd-networkd[1577]: calicebba79ad4a: Gained IPv6LL Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0977b000 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0977b030 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0977af40 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0977b050 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0977b030 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0977b020 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0977b050 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0977b030 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0977b050 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0977b020 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0977b090 a2=28 a3=0 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe0977ae40 a2=50 a3=1 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.849000 audit: BPF prog-id=180 op=LOAD Nov 1 01:01:41.849000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe0977ae40 a2=94 a3=5 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.850000 audit: BPF prog-id=180 op=UNLOAD Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe0977aef0 a2=50 a3=1 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.850000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe0977b010 a2=4 a3=38 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.850000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { confidentiality } for pid=4209 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 01:01:41.850000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe0977b060 a2=94 a3=6 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.850000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { confidentiality } for pid=4209 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 01:01:41.850000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe0977a810 a2=94 a3=88 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.850000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.850000 audit[4209]: AVC avc: denied { confidentiality } for pid=4209 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 01:01:41.850000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe0977a810 a2=94 a3=88 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.850000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.851000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.851000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe0977c240 a2=10 a3=f8f00800 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.851000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.851000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.851000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe0977c0e0 a2=10 a3=3 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.851000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.851000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.851000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe0977c080 a2=10 a3=3 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.851000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.851000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:41.851000 audit[4209]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe0977c080 a2=10 a3=7 items=0 ppid=4073 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:41.851000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 01:01:41.858000 audit: BPF prog-id=175 op=UNLOAD Nov 1 01:01:42.035000 audit[4243]: NETFILTER_CFG table=mangle:116 family=2 entries=16 op=nft_register_chain pid=4243 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:42.035000 audit[4243]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fffc3a2bea0 a2=0 a3=7fffc3a2be8c items=0 ppid=4073 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:42.035000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:42.102000 audit[4245]: NETFILTER_CFG table=nat:117 family=2 entries=15 op=nft_register_chain pid=4245 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:42.102000 audit[4245]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffd22e1aad0 a2=0 a3=7ffd22e1aabc items=0 ppid=4073 pid=4245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:42.102000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:42.108000 audit[4244]: NETFILTER_CFG table=raw:118 family=2 entries=21 op=nft_register_chain pid=4244 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:42.108000 audit[4244]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffdb4e4a070 a2=0 a3=7ffdb4e4a05c items=0 ppid=4073 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:42.108000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:42.122000 audit[4246]: NETFILTER_CFG table=filter:119 family=2 entries=156 op=nft_register_chain pid=4246 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:42.122000 audit[4246]: SYSCALL arch=c000003e syscall=46 success=yes exit=89444 a0=3 a1=7ffd45887900 a2=0 a3=7ffd458878ec items=0 ppid=4073 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:42.122000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:42.706219 kubelet[2460]: E1101 01:01:42.706166 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:01:43.378061 systemd-networkd[1577]: vxlan.calico: Gained IPv6LL Nov 1 01:01:48.478359 env[1425]: time="2025-11-01T01:01:48.477788537Z" level=info msg="StopPodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\"" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.524 [INFO][4278] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.526 [INFO][4278] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" iface="eth0" netns="/var/run/netns/cni-b434b188-b956-cd22-7959-356c3ae5bb46" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.527 [INFO][4278] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" iface="eth0" netns="/var/run/netns/cni-b434b188-b956-cd22-7959-356c3ae5bb46" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.527 [INFO][4278] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" iface="eth0" netns="/var/run/netns/cni-b434b188-b956-cd22-7959-356c3ae5bb46" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.527 [INFO][4278] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.527 [INFO][4278] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.553 [INFO][4285] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.553 [INFO][4285] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.553 [INFO][4285] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.559 [WARNING][4285] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.559 [INFO][4285] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.560 [INFO][4285] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:48.563091 env[1425]: 2025-11-01 01:01:48.561 [INFO][4278] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:01:48.568591 env[1425]: time="2025-11-01T01:01:48.563236424Z" level=info msg="TearDown network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\" successfully" Nov 1 01:01:48.568591 env[1425]: time="2025-11-01T01:01:48.563278725Z" level=info msg="StopPodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\" returns successfully" Nov 1 01:01:48.568591 env[1425]: time="2025-11-01T01:01:48.567875567Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-77948f7547-899dr,Uid:25c95b45-63cd-474c-ab3f-810f3121d2f5,Namespace:calico-system,Attempt:1,}" Nov 1 01:01:48.566717 systemd[1]: run-netns-cni\x2db434b188\x2db956\x2dcd22\x2d7959\x2d356c3ae5bb46.mount: Deactivated successfully. Nov 1 01:01:48.750348 systemd-networkd[1577]: calicf3bb575118: Link UP Nov 1 01:01:48.758036 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 01:01:48.772411 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicf3bb575118: link becomes ready Nov 1 01:01:48.772949 systemd-networkd[1577]: calicf3bb575118: Gained carrier Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.659 [INFO][4292] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0 calico-kube-controllers-77948f7547- calico-system 25c95b45-63cd-474c-ab3f-810f3121d2f5 1026 0 2025-11-01 01:00:51 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:77948f7547 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-9d78d981c4 calico-kube-controllers-77948f7547-899dr eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calicf3bb575118 [] [] }} ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Namespace="calico-system" Pod="calico-kube-controllers-77948f7547-899dr" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.659 [INFO][4292] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Namespace="calico-system" Pod="calico-kube-controllers-77948f7547-899dr" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.693 [INFO][4304] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" HandleID="k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.693 [INFO][4304] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" HandleID="k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-9d78d981c4", "pod":"calico-kube-controllers-77948f7547-899dr", "timestamp":"2025-11-01 01:01:48.693686627 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9d78d981c4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.694 [INFO][4304] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.694 [INFO][4304] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.694 [INFO][4304] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9d78d981c4' Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.703 [INFO][4304] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.708 [INFO][4304] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.715 [INFO][4304] ipam/ipam.go 511: Trying affinity for 192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.718 [INFO][4304] ipam/ipam.go 158: Attempting to load block cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.720 [INFO][4304] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.720 [INFO][4304] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.95.0/26 handle="k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.723 [INFO][4304] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8 Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.728 [INFO][4304] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.95.0/26 handle="k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.738 [INFO][4304] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.95.4/26] block=192.168.95.0/26 handle="k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.738 [INFO][4304] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.95.4/26] handle="k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.738 [INFO][4304] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:48.792400 env[1425]: 2025-11-01 01:01:48.738 [INFO][4304] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.95.4/26] IPv6=[] ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" HandleID="k8s-pod-network.fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.793418 env[1425]: 2025-11-01 01:01:48.740 [INFO][4292] cni-plugin/k8s.go 418: Populated endpoint ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Namespace="calico-system" Pod="calico-kube-controllers-77948f7547-899dr" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0", GenerateName:"calico-kube-controllers-77948f7547-", Namespace:"calico-system", SelfLink:"", UID:"25c95b45-63cd-474c-ab3f-810f3121d2f5", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"77948f7547", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"", Pod:"calico-kube-controllers-77948f7547-899dr", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.95.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicf3bb575118", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:48.793418 env[1425]: 2025-11-01 01:01:48.740 [INFO][4292] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.95.4/32] ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Namespace="calico-system" Pod="calico-kube-controllers-77948f7547-899dr" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.793418 env[1425]: 2025-11-01 01:01:48.740 [INFO][4292] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicf3bb575118 ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Namespace="calico-system" Pod="calico-kube-controllers-77948f7547-899dr" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.793418 env[1425]: 2025-11-01 01:01:48.760 [INFO][4292] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Namespace="calico-system" Pod="calico-kube-controllers-77948f7547-899dr" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.793418 env[1425]: 2025-11-01 01:01:48.775 [INFO][4292] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Namespace="calico-system" Pod="calico-kube-controllers-77948f7547-899dr" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0", GenerateName:"calico-kube-controllers-77948f7547-", Namespace:"calico-system", SelfLink:"", UID:"25c95b45-63cd-474c-ab3f-810f3121d2f5", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"77948f7547", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8", Pod:"calico-kube-controllers-77948f7547-899dr", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.95.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicf3bb575118", MAC:"8e:25:d8:6d:60:0e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:48.793418 env[1425]: 2025-11-01 01:01:48.790 [INFO][4292] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8" Namespace="calico-system" Pod="calico-kube-controllers-77948f7547-899dr" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:01:48.814859 env[1425]: time="2025-11-01T01:01:48.814791443Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:01:48.814998 env[1425]: time="2025-11-01T01:01:48.814872444Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:01:48.814998 env[1425]: time="2025-11-01T01:01:48.814900744Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:01:48.815123 env[1425]: time="2025-11-01T01:01:48.815038346Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8 pid=4327 runtime=io.containerd.runc.v2 Nov 1 01:01:48.845602 kernel: kauditd_printk_skb: 839 callbacks suppressed Nov 1 01:01:48.845729 kernel: audit: type=1325 audit(1761958908.828:1202): table=filter:120 family=2 entries=50 op=nft_register_chain pid=4329 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:48.828000 audit[4329]: NETFILTER_CFG table=filter:120 family=2 entries=50 op=nft_register_chain pid=4329 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:48.866572 kernel: audit: type=1300 audit(1761958908.828:1202): arch=c000003e syscall=46 success=yes exit=24804 a0=3 a1=7ffe90b2da90 a2=0 a3=7ffe90b2da7c items=0 ppid=4073 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:48.828000 audit[4329]: SYSCALL arch=c000003e syscall=46 success=yes exit=24804 a0=3 a1=7ffe90b2da90 a2=0 a3=7ffe90b2da7c items=0 ppid=4073 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:48.875525 systemd[1]: Started cri-containerd-fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8.scope. Nov 1 01:01:48.828000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:48.889367 kernel: audit: type=1327 audit(1761958908.828:1202): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.904512 kernel: audit: type=1400 audit(1761958908.889:1203): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.904616 kernel: audit: type=1400 audit(1761958908.889:1204): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.929899 kernel: audit: type=1400 audit(1761958908.889:1205): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.954142 kernel: audit: type=1400 audit(1761958908.889:1206): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.954727 kernel: audit: type=1400 audit(1761958908.889:1207): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.981322 kernel: audit: type=1400 audit(1761958908.889:1208): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.981414 kernel: audit: type=1400 audit(1761958908.889:1209): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.890000 audit: BPF prog-id=181 op=LOAD Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4327 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:48.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663376631333862613662373031396431663261306337613039333766 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4327 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:48.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663376631333862613662373031396431663261306337613039333766 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.895000 audit: BPF prog-id=182 op=LOAD Nov 1 01:01:48.895000 audit[4339]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002edff0 items=0 ppid=4327 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:48.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663376631333862613662373031396431663261306337613039333766 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit: BPF prog-id=183 op=LOAD Nov 1 01:01:48.928000 audit[4339]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ec038 items=0 ppid=4327 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:48.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663376631333862613662373031396431663261306337613039333766 Nov 1 01:01:48.928000 audit: BPF prog-id=183 op=UNLOAD Nov 1 01:01:48.928000 audit: BPF prog-id=182 op=UNLOAD Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { perfmon } for pid=4339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit[4339]: AVC avc: denied { bpf } for pid=4339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:48.928000 audit: BPF prog-id=184 op=LOAD Nov 1 01:01:48.928000 audit[4339]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ec448 items=0 ppid=4327 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:48.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663376631333862613662373031396431663261306337613039333766 Nov 1 01:01:48.998156 env[1425]: time="2025-11-01T01:01:48.998108733Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-77948f7547-899dr,Uid:25c95b45-63cd-474c-ab3f-810f3121d2f5,Namespace:calico-system,Attempt:1,} returns sandbox id \"fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8\"" Nov 1 01:01:49.003888 env[1425]: time="2025-11-01T01:01:48.999700848Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 01:01:49.256191 env[1425]: time="2025-11-01T01:01:49.256047798Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:49.260841 env[1425]: time="2025-11-01T01:01:49.260781341Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 01:01:49.261074 kubelet[2460]: E1101 01:01:49.261027 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:01:49.261472 kubelet[2460]: E1101 01:01:49.261080 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:01:49.261472 kubelet[2460]: E1101 01:01:49.261257 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nlxhs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-77948f7547-899dr_calico-system(25c95b45-63cd-474c-ab3f-810f3121d2f5): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:49.262765 kubelet[2460]: E1101 01:01:49.262724 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:01:49.478417 env[1425]: time="2025-11-01T01:01:49.478364136Z" level=info msg="StopPodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\"" Nov 1 01:01:49.479255 env[1425]: time="2025-11-01T01:01:49.479220444Z" level=info msg="StopPodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\"" Nov 1 01:01:49.481155 env[1425]: time="2025-11-01T01:01:49.481118661Z" level=info msg="StopPodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\"" Nov 1 01:01:49.726321 kubelet[2460]: E1101 01:01:49.726183 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.657 [INFO][4390] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.657 [INFO][4390] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" iface="eth0" netns="/var/run/netns/cni-e89c6fc2-9e61-1149-f8f7-e2ae0f6c8739" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.657 [INFO][4390] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" iface="eth0" netns="/var/run/netns/cni-e89c6fc2-9e61-1149-f8f7-e2ae0f6c8739" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.657 [INFO][4390] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" iface="eth0" netns="/var/run/netns/cni-e89c6fc2-9e61-1149-f8f7-e2ae0f6c8739" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.657 [INFO][4390] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.657 [INFO][4390] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.707 [INFO][4420] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.707 [INFO][4420] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.708 [INFO][4420] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.716 [WARNING][4420] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.716 [INFO][4420] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.718 [INFO][4420] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:49.732840 env[1425]: 2025-11-01 01:01:49.724 [INFO][4390] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:01:49.734937 env[1425]: time="2025-11-01T01:01:49.734890087Z" level=info msg="TearDown network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\" successfully" Nov 1 01:01:49.735085 env[1425]: time="2025-11-01T01:01:49.735064389Z" level=info msg="StopPodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\" returns successfully" Nov 1 01:01:49.735893 env[1425]: time="2025-11-01T01:01:49.735860696Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-nk2dv,Uid:4e3f47c8-00e9-4d23-af1c-56111466a677,Namespace:calico-system,Attempt:1,}" Nov 1 01:01:49.740046 systemd[1]: run-netns-cni\x2de89c6fc2\x2d9e61\x2d1149\x2df8f7\x2de2ae0f6c8739.mount: Deactivated successfully. Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.653 [INFO][4399] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.653 [INFO][4399] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" iface="eth0" netns="/var/run/netns/cni-9a36fb46-64da-4951-f983-f25a0fa69d3c" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.654 [INFO][4399] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" iface="eth0" netns="/var/run/netns/cni-9a36fb46-64da-4951-f983-f25a0fa69d3c" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.656 [INFO][4399] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" iface="eth0" netns="/var/run/netns/cni-9a36fb46-64da-4951-f983-f25a0fa69d3c" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.656 [INFO][4399] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.656 [INFO][4399] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.729 [INFO][4421] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.730 [INFO][4421] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.730 [INFO][4421] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.751 [WARNING][4421] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.752 [INFO][4421] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.753 [INFO][4421] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:49.758261 env[1425]: 2025-11-01 01:01:49.757 [INFO][4399] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:01:49.764440 systemd[1]: run-netns-cni\x2d9a36fb46\x2d64da\x2d4951\x2df983\x2df25a0fa69d3c.mount: Deactivated successfully. Nov 1 01:01:49.765845 env[1425]: time="2025-11-01T01:01:49.765816371Z" level=info msg="TearDown network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\" successfully" Nov 1 01:01:49.765926 env[1425]: time="2025-11-01T01:01:49.765914472Z" level=info msg="StopPodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\" returns successfully" Nov 1 01:01:49.767005 env[1425]: time="2025-11-01T01:01:49.766875580Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-88f7866b5-794bz,Uid:56dcd17c-f13d-4889-8b88-69d06e438fd0,Namespace:calico-apiserver,Attempt:1,}" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.645 [INFO][4395] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.645 [INFO][4395] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" iface="eth0" netns="/var/run/netns/cni-58d2b771-d976-b4ca-4e99-00c32b6893be" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.645 [INFO][4395] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" iface="eth0" netns="/var/run/netns/cni-58d2b771-d976-b4ca-4e99-00c32b6893be" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.645 [INFO][4395] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" iface="eth0" netns="/var/run/netns/cni-58d2b771-d976-b4ca-4e99-00c32b6893be" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.645 [INFO][4395] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.645 [INFO][4395] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.731 [INFO][4414] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.732 [INFO][4414] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.753 [INFO][4414] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.768 [WARNING][4414] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.768 [INFO][4414] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.769 [INFO][4414] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:49.772470 env[1425]: 2025-11-01 01:01:49.771 [INFO][4395] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:01:49.778316 env[1425]: time="2025-11-01T01:01:49.772607033Z" level=info msg="TearDown network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\" successfully" Nov 1 01:01:49.778316 env[1425]: time="2025-11-01T01:01:49.772636433Z" level=info msg="StopPodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\" returns successfully" Nov 1 01:01:49.778316 env[1425]: time="2025-11-01T01:01:49.773283439Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-j8n8l,Uid:9496b934-0cb3-4fbd-9030-ca901c84f793,Namespace:kube-system,Attempt:1,}" Nov 1 01:01:49.775801 systemd[1]: run-netns-cni\x2d58d2b771\x2dd976\x2db4ca\x2d4e99\x2d00c32b6893be.mount: Deactivated successfully. Nov 1 01:01:49.993663 systemd-networkd[1577]: cali63b39474519: Link UP Nov 1 01:01:50.010097 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 01:01:50.010216 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali63b39474519: link becomes ready Nov 1 01:01:50.016993 systemd-networkd[1577]: cali63b39474519: Gained carrier Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.868 [INFO][4434] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0 goldmane-666569f655- calico-system 4e3f47c8-00e9-4d23-af1c-56111466a677 1039 0 2025-11-01 01:00:49 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-9d78d981c4 goldmane-666569f655-nk2dv eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali63b39474519 [] [] }} ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Namespace="calico-system" Pod="goldmane-666569f655-nk2dv" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.868 [INFO][4434] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Namespace="calico-system" Pod="goldmane-666569f655-nk2dv" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.936 [INFO][4452] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" HandleID="k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.936 [INFO][4452] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" HandleID="k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251590), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-9d78d981c4", "pod":"goldmane-666569f655-nk2dv", "timestamp":"2025-11-01 01:01:49.936310634 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9d78d981c4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.936 [INFO][4452] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.937 [INFO][4452] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.937 [INFO][4452] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9d78d981c4' Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.945 [INFO][4452] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.950 [INFO][4452] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.957 [INFO][4452] ipam/ipam.go 511: Trying affinity for 192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.959 [INFO][4452] ipam/ipam.go 158: Attempting to load block cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.964 [INFO][4452] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.964 [INFO][4452] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.95.0/26 handle="k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.969 [INFO][4452] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8 Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.978 [INFO][4452] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.95.0/26 handle="k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.988 [INFO][4452] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.95.5/26] block=192.168.95.0/26 handle="k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.988 [INFO][4452] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.95.5/26] handle="k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.988 [INFO][4452] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:50.044522 env[1425]: 2025-11-01 01:01:49.988 [INFO][4452] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.95.5/26] IPv6=[] ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" HandleID="k8s-pod-network.823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:50.045626 env[1425]: 2025-11-01 01:01:49.990 [INFO][4434] cni-plugin/k8s.go 418: Populated endpoint ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Namespace="calico-system" Pod="goldmane-666569f655-nk2dv" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"4e3f47c8-00e9-4d23-af1c-56111466a677", ResourceVersion:"1039", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"", Pod:"goldmane-666569f655-nk2dv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.95.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali63b39474519", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:50.045626 env[1425]: 2025-11-01 01:01:49.990 [INFO][4434] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.95.5/32] ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Namespace="calico-system" Pod="goldmane-666569f655-nk2dv" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:50.045626 env[1425]: 2025-11-01 01:01:49.990 [INFO][4434] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali63b39474519 ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Namespace="calico-system" Pod="goldmane-666569f655-nk2dv" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:50.045626 env[1425]: 2025-11-01 01:01:50.017 [INFO][4434] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Namespace="calico-system" Pod="goldmane-666569f655-nk2dv" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:50.045626 env[1425]: 2025-11-01 01:01:50.017 [INFO][4434] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Namespace="calico-system" Pod="goldmane-666569f655-nk2dv" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"4e3f47c8-00e9-4d23-af1c-56111466a677", ResourceVersion:"1039", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8", Pod:"goldmane-666569f655-nk2dv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.95.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali63b39474519", MAC:"e6:08:94:37:85:f3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:50.045626 env[1425]: 2025-11-01 01:01:50.043 [INFO][4434] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8" Namespace="calico-system" Pod="goldmane-666569f655-nk2dv" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:01:50.086781 env[1425]: time="2025-11-01T01:01:50.085595098Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:01:50.086781 env[1425]: time="2025-11-01T01:01:50.085668499Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:01:50.086781 env[1425]: time="2025-11-01T01:01:50.085699299Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:01:50.086781 env[1425]: time="2025-11-01T01:01:50.085853600Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8 pid=4513 runtime=io.containerd.runc.v2 Nov 1 01:01:50.105277 systemd[1]: Started cri-containerd-823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8.scope. Nov 1 01:01:50.111396 systemd-networkd[1577]: calic5e72a3620a: Link UP Nov 1 01:01:50.117412 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic5e72a3620a: link becomes ready Nov 1 01:01:50.121867 systemd-networkd[1577]: calic5e72a3620a: Gained carrier Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:49.926 [INFO][4451] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0 calico-apiserver-88f7866b5- calico-apiserver 56dcd17c-f13d-4889-8b88-69d06e438fd0 1040 0 2025-11-01 01:00:45 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:88f7866b5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-9d78d981c4 calico-apiserver-88f7866b5-794bz eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic5e72a3620a [] [] }} ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-794bz" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:49.926 [INFO][4451] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-794bz" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.019 [INFO][4484] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" HandleID="k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.019 [INFO][4484] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" HandleID="k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c8fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-9d78d981c4", "pod":"calico-apiserver-88f7866b5-794bz", "timestamp":"2025-11-01 01:01:50.019581896 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9d78d981c4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.020 [INFO][4484] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.020 [INFO][4484] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.020 [INFO][4484] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9d78d981c4' Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.046 [INFO][4484] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.061 [INFO][4484] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.067 [INFO][4484] ipam/ipam.go 511: Trying affinity for 192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.070 [INFO][4484] ipam/ipam.go 158: Attempting to load block cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.073 [INFO][4484] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.073 [INFO][4484] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.95.0/26 handle="k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.075 [INFO][4484] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3 Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.082 [INFO][4484] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.95.0/26 handle="k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.097 [INFO][4484] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.95.6/26] block=192.168.95.0/26 handle="k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.097 [INFO][4484] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.95.6/26] handle="k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.097 [INFO][4484] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:50.142170 env[1425]: 2025-11-01 01:01:50.097 [INFO][4484] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.95.6/26] IPv6=[] ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" HandleID="k8s-pod-network.8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:50.143271 env[1425]: 2025-11-01 01:01:50.100 [INFO][4451] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-794bz" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0", GenerateName:"calico-apiserver-88f7866b5-", Namespace:"calico-apiserver", SelfLink:"", UID:"56dcd17c-f13d-4889-8b88-69d06e438fd0", ResourceVersion:"1040", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"88f7866b5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"", Pod:"calico-apiserver-88f7866b5-794bz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.95.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic5e72a3620a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:50.143271 env[1425]: 2025-11-01 01:01:50.100 [INFO][4451] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.95.6/32] ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-794bz" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:50.143271 env[1425]: 2025-11-01 01:01:50.100 [INFO][4451] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic5e72a3620a ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-794bz" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:50.143271 env[1425]: 2025-11-01 01:01:50.122 [INFO][4451] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-794bz" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:50.143271 env[1425]: 2025-11-01 01:01:50.122 [INFO][4451] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-794bz" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0", GenerateName:"calico-apiserver-88f7866b5-", Namespace:"calico-apiserver", SelfLink:"", UID:"56dcd17c-f13d-4889-8b88-69d06e438fd0", ResourceVersion:"1040", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"88f7866b5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3", Pod:"calico-apiserver-88f7866b5-794bz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.95.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic5e72a3620a", MAC:"1a:b5:65:11:1a:09", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:50.143271 env[1425]: 2025-11-01 01:01:50.140 [INFO][4451] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-794bz" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:01:50.135000 audit[4539]: NETFILTER_CFG table=filter:121 family=2 entries=52 op=nft_register_chain pid=4539 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:50.135000 audit[4539]: SYSCALL arch=c000003e syscall=46 success=yes exit=27540 a0=3 a1=7fffdfaa14d0 a2=0 a3=7fffdfaa14bc items=0 ppid=4073 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.135000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.163000 audit: BPF prog-id=185 op=LOAD Nov 1 01:01:50.164000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.164000 audit[4524]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4513 pid=4524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832336633386338383933633238373838623532363633623631333530 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4513 pid=4524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832336633386338383933633238373838623532363633623631333530 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit: BPF prog-id=186 op=LOAD Nov 1 01:01:50.165000 audit[4524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00040a430 items=0 ppid=4513 pid=4524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832336633386338383933633238373838623532363633623631333530 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit: BPF prog-id=187 op=LOAD Nov 1 01:01:50.165000 audit[4524]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00040a478 items=0 ppid=4513 pid=4524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832336633386338383933633238373838623532363633623631333530 Nov 1 01:01:50.165000 audit: BPF prog-id=187 op=UNLOAD Nov 1 01:01:50.165000 audit: BPF prog-id=186 op=UNLOAD Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { perfmon } for pid=4524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit[4524]: AVC avc: denied { bpf } for pid=4524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.165000 audit: BPF prog-id=188 op=LOAD Nov 1 01:01:50.165000 audit[4524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00040a888 items=0 ppid=4513 pid=4524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832336633386338383933633238373838623532363633623631333530 Nov 1 01:01:50.181000 audit[4554]: NETFILTER_CFG table=filter:122 family=2 entries=54 op=nft_register_chain pid=4554 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:50.181000 audit[4554]: SYSCALL arch=c000003e syscall=46 success=yes exit=29416 a0=3 a1=7ffe09247b10 a2=0 a3=7ffe09247afc items=0 ppid=4073 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.181000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:50.196116 env[1425]: time="2025-11-01T01:01:50.196041805Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:01:50.197796 env[1425]: time="2025-11-01T01:01:50.197758420Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:01:50.197974 env[1425]: time="2025-11-01T01:01:50.197909322Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:01:50.198276 env[1425]: time="2025-11-01T01:01:50.198242325Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3 pid=4560 runtime=io.containerd.runc.v2 Nov 1 01:01:50.217866 systemd[1]: Started cri-containerd-8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3.scope. Nov 1 01:01:50.234653 systemd-networkd[1577]: cali7a7ca7a0e0f: Link UP Nov 1 01:01:50.242087 systemd-networkd[1577]: cali7a7ca7a0e0f: Gained carrier Nov 1 01:01:50.242501 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7a7ca7a0e0f: link becomes ready Nov 1 01:01:50.250402 env[1425]: time="2025-11-01T01:01:50.250297399Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-nk2dv,Uid:4e3f47c8-00e9-4d23-af1c-56111466a677,Namespace:calico-system,Attempt:1,} returns sandbox id \"823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8\"" Nov 1 01:01:50.260103 env[1425]: time="2025-11-01T01:01:50.260071688Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.268000 audit: BPF prog-id=189 op=LOAD Nov 1 01:01:50.268000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.268000 audit[4570]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4560 pid=4570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862393663346436356435333138646161333537643339353965316266 Nov 1 01:01:50.268000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.268000 audit[4570]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4560 pid=4570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862393663346436356435333138646161333537643339353965316266 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit: BPF prog-id=190 op=LOAD Nov 1 01:01:50.269000 audit[4570]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001e2840 items=0 ppid=4560 pid=4570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862393663346436356435333138646161333537643339353965316266 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.269000 audit: BPF prog-id=191 op=LOAD Nov 1 01:01:50.269000 audit[4570]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001e2888 items=0 ppid=4560 pid=4570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862393663346436356435333138646161333537643339353965316266 Nov 1 01:01:50.270000 audit: BPF prog-id=191 op=UNLOAD Nov 1 01:01:50.270000 audit: BPF prog-id=190 op=UNLOAD Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { perfmon } for pid=4570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit[4570]: AVC avc: denied { bpf } for pid=4570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.270000 audit: BPF prog-id=192 op=LOAD Nov 1 01:01:50.270000 audit[4570]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0001e2c98 items=0 ppid=4560 pid=4570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862393663346436356435333138646161333537643339353965316266 Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:49.972 [INFO][4461] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0 coredns-668d6bf9bc- kube-system 9496b934-0cb3-4fbd-9030-ca901c84f793 1038 0 2025-11-01 01:00:34 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-9d78d981c4 coredns-668d6bf9bc-j8n8l eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7a7ca7a0e0f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Namespace="kube-system" Pod="coredns-668d6bf9bc-j8n8l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:49.972 [INFO][4461] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Namespace="kube-system" Pod="coredns-668d6bf9bc-j8n8l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.076 [INFO][4493] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" HandleID="k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.076 [INFO][4493] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" HandleID="k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000250fe0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-9d78d981c4", "pod":"coredns-668d6bf9bc-j8n8l", "timestamp":"2025-11-01 01:01:50.076243113 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9d78d981c4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.076 [INFO][4493] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.098 [INFO][4493] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.098 [INFO][4493] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9d78d981c4' Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.149 [INFO][4493] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.173 [INFO][4493] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.188 [INFO][4493] ipam/ipam.go 511: Trying affinity for 192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.190 [INFO][4493] ipam/ipam.go 158: Attempting to load block cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.193 [INFO][4493] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.193 [INFO][4493] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.95.0/26 handle="k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.195 [INFO][4493] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609 Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.204 [INFO][4493] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.95.0/26 handle="k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.222 [INFO][4493] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.95.7/26] block=192.168.95.0/26 handle="k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.222 [INFO][4493] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.95.7/26] handle="k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.222 [INFO][4493] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:50.283471 env[1425]: 2025-11-01 01:01:50.222 [INFO][4493] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.95.7/26] IPv6=[] ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" HandleID="k8s-pod-network.42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:50.284188 env[1425]: 2025-11-01 01:01:50.229 [INFO][4461] cni-plugin/k8s.go 418: Populated endpoint ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Namespace="kube-system" Pod="coredns-668d6bf9bc-j8n8l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"9496b934-0cb3-4fbd-9030-ca901c84f793", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"", Pod:"coredns-668d6bf9bc-j8n8l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.95.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7a7ca7a0e0f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:50.284188 env[1425]: 2025-11-01 01:01:50.230 [INFO][4461] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.95.7/32] ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Namespace="kube-system" Pod="coredns-668d6bf9bc-j8n8l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:50.284188 env[1425]: 2025-11-01 01:01:50.230 [INFO][4461] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7a7ca7a0e0f ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Namespace="kube-system" Pod="coredns-668d6bf9bc-j8n8l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:50.284188 env[1425]: 2025-11-01 01:01:50.242 [INFO][4461] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Namespace="kube-system" Pod="coredns-668d6bf9bc-j8n8l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:50.284188 env[1425]: 2025-11-01 01:01:50.243 [INFO][4461] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Namespace="kube-system" Pod="coredns-668d6bf9bc-j8n8l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"9496b934-0cb3-4fbd-9030-ca901c84f793", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609", Pod:"coredns-668d6bf9bc-j8n8l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.95.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7a7ca7a0e0f", MAC:"96:45:a2:a8:e7:db", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:50.284188 env[1425]: 2025-11-01 01:01:50.280 [INFO][4461] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609" Namespace="kube-system" Pod="coredns-668d6bf9bc-j8n8l" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:01:50.290433 systemd-networkd[1577]: calicf3bb575118: Gained IPv6LL Nov 1 01:01:50.302565 env[1425]: time="2025-11-01T01:01:50.302508975Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:01:50.302716 env[1425]: time="2025-11-01T01:01:50.302697277Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:01:50.302799 env[1425]: time="2025-11-01T01:01:50.302783778Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:01:50.303183 env[1425]: time="2025-11-01T01:01:50.303147181Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609 pid=4609 runtime=io.containerd.runc.v2 Nov 1 01:01:50.335958 systemd[1]: Started cri-containerd-42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609.scope. Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.355000 audit: BPF prog-id=193 op=LOAD Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4609 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653764653766346331313137363734643138653632626530653263 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4609 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653764653766346331313137363734643138653632626530653263 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit: BPF prog-id=194 op=LOAD Nov 1 01:01:50.356000 audit[4621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021df90 items=0 ppid=4609 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653764653766346331313137363734643138653632626530653263 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.356000 audit: BPF prog-id=195 op=LOAD Nov 1 01:01:50.356000 audit[4621]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021dfd8 items=0 ppid=4609 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653764653766346331313137363734643138653632626530653263 Nov 1 01:01:50.356000 audit: BPF prog-id=195 op=UNLOAD Nov 1 01:01:50.356000 audit: BPF prog-id=194 op=UNLOAD Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.357000 audit: BPF prog-id=196 op=LOAD Nov 1 01:01:50.357000 audit[4621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b03e8 items=0 ppid=4609 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653764653766346331313137363734643138653632626530653263 Nov 1 01:01:50.368766 env[1425]: time="2025-11-01T01:01:50.368720779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-88f7866b5-794bz,Uid:56dcd17c-f13d-4889-8b88-69d06e438fd0,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3\"" Nov 1 01:01:50.393000 audit[4646]: NETFILTER_CFG table=filter:123 family=2 entries=44 op=nft_register_chain pid=4646 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:50.393000 audit[4646]: SYSCALL arch=c000003e syscall=46 success=yes exit=21516 a0=3 a1=7fff220a0280 a2=0 a3=7fff220a026c items=0 ppid=4073 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.393000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:50.399950 env[1425]: time="2025-11-01T01:01:50.399902963Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-j8n8l,Uid:9496b934-0cb3-4fbd-9030-ca901c84f793,Namespace:kube-system,Attempt:1,} returns sandbox id \"42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609\"" Nov 1 01:01:50.402704 env[1425]: time="2025-11-01T01:01:50.402669688Z" level=info msg="CreateContainer within sandbox \"42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 01:01:50.449609 env[1425]: time="2025-11-01T01:01:50.449560316Z" level=info msg="CreateContainer within sandbox \"42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"de142eddc999a5edc4c1a2ca1abe6b61581acde465bc1328130cf10a9d325f1d\"" Nov 1 01:01:50.450579 env[1425]: time="2025-11-01T01:01:50.450542125Z" level=info msg="StartContainer for \"de142eddc999a5edc4c1a2ca1abe6b61581acde465bc1328130cf10a9d325f1d\"" Nov 1 01:01:50.472998 systemd[1]: Started cri-containerd-de142eddc999a5edc4c1a2ca1abe6b61581acde465bc1328130cf10a9d325f1d.scope. Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.495000 audit: BPF prog-id=197 op=LOAD Nov 1 01:01:50.496000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.496000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4609 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465313432656464633939396135656463346331613263613161626536 Nov 1 01:01:50.496000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.496000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4609 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465313432656464633939396135656463346331613263613161626536 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.497000 audit: BPF prog-id=198 op=LOAD Nov 1 01:01:50.497000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a03a0 items=0 ppid=4609 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465313432656464633939396135656463346331613263613161626536 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.498000 audit: BPF prog-id=199 op=LOAD Nov 1 01:01:50.498000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a03e8 items=0 ppid=4609 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465313432656464633939396135656463346331613263613161626536 Nov 1 01:01:50.498000 audit: BPF prog-id=199 op=UNLOAD Nov 1 01:01:50.499000 audit: BPF prog-id=198 op=UNLOAD Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:50.499000 audit: BPF prog-id=200 op=LOAD Nov 1 01:01:50.499000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a07f8 items=0 ppid=4609 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465313432656464633939396135656463346331613263613161626536 Nov 1 01:01:50.521658 env[1425]: time="2025-11-01T01:01:50.521607573Z" level=info msg="StartContainer for \"de142eddc999a5edc4c1a2ca1abe6b61581acde465bc1328130cf10a9d325f1d\" returns successfully" Nov 1 01:01:50.526844 env[1425]: time="2025-11-01T01:01:50.526761620Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:50.532000 env[1425]: time="2025-11-01T01:01:50.531945967Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 01:01:50.532980 kubelet[2460]: E1101 01:01:50.532314 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 01:01:50.532980 kubelet[2460]: E1101 01:01:50.532384 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 01:01:50.532980 kubelet[2460]: E1101 01:01:50.532662 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kmkfz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-nk2dv_calico-system(4e3f47c8-00e9-4d23-af1c-56111466a677): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:50.533876 env[1425]: time="2025-11-01T01:01:50.533847384Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 01:01:50.531000 audit[4669]: AVC avc: denied { getattr } for pid=4669 comm="coredns" path="cgroup:[4026532703]" dev="nsfs" ino=4026532703 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c334 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 01:01:50.531000 audit[4669]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c0000c4e08 a3=0 items=0 ppid=4609 pid=4669 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c334 key=(null) Nov 1 01:01:50.531000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 01:01:50.535040 kubelet[2460]: E1101 01:01:50.534663 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:01:50.733209 kubelet[2460]: E1101 01:01:50.733164 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:01:50.733603 kubelet[2460]: E1101 01:01:50.733572 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:01:50.754473 kubelet[2460]: I1101 01:01:50.753350 2460 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-j8n8l" podStartSLOduration=76.753312985 podStartE2EDuration="1m16.753312985s" podCreationTimestamp="2025-11-01 01:00:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 01:01:50.752464177 +0000 UTC m=+81.371514717" watchObservedRunningTime="2025-11-01 01:01:50.753312985 +0000 UTC m=+81.372363425" Nov 1 01:01:50.778000 audit[4687]: NETFILTER_CFG table=filter:124 family=2 entries=14 op=nft_register_rule pid=4687 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:50.778000 audit[4687]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe09816830 a2=0 a3=7ffe0981681c items=0 ppid=2565 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.778000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:50.782000 audit[4687]: NETFILTER_CFG table=nat:125 family=2 entries=44 op=nft_register_rule pid=4687 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:50.782000 audit[4687]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe09816830 a2=0 a3=7ffe0981681c items=0 ppid=2565 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.782000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:50.796518 env[1425]: time="2025-11-01T01:01:50.796461078Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:50.799957 env[1425]: time="2025-11-01T01:01:50.799870009Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 01:01:50.800215 kubelet[2460]: E1101 01:01:50.800174 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:01:50.800312 kubelet[2460]: E1101 01:01:50.800228 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:01:50.800433 kubelet[2460]: E1101 01:01:50.800380 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-qrqpb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-88f7866b5-794bz_calico-apiserver(56dcd17c-f13d-4889-8b88-69d06e438fd0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:50.801766 kubelet[2460]: E1101 01:01:50.801725 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:01:50.820000 audit[4689]: NETFILTER_CFG table=filter:126 family=2 entries=14 op=nft_register_rule pid=4689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:50.820000 audit[4689]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff6248e250 a2=0 a3=7fff6248e23c items=0 ppid=2565 pid=4689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.820000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:50.824000 audit[4689]: NETFILTER_CFG table=nat:127 family=2 entries=20 op=nft_register_rule pid=4689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:50.824000 audit[4689]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff6248e250 a2=0 a3=7fff6248e23c items=0 ppid=2565 pid=4689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:50.824000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:51.249517 systemd-networkd[1577]: cali63b39474519: Gained IPv6LL Nov 1 01:01:51.633482 systemd-networkd[1577]: calic5e72a3620a: Gained IPv6LL Nov 1 01:01:51.735810 kubelet[2460]: E1101 01:01:51.735761 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:01:51.737254 kubelet[2460]: E1101 01:01:51.737209 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:01:51.793000 audit[4692]: NETFILTER_CFG table=filter:128 family=2 entries=14 op=nft_register_rule pid=4692 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:51.793000 audit[4692]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc55c5fad0 a2=0 a3=7ffc55c5fabc items=0 ppid=2565 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:51.793000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:51.820000 audit[4692]: NETFILTER_CFG table=nat:129 family=2 entries=56 op=nft_register_chain pid=4692 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:51.820000 audit[4692]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffc55c5fad0 a2=0 a3=7ffc55c5fabc items=0 ppid=2565 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:51.820000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:52.146597 systemd-networkd[1577]: cali7a7ca7a0e0f: Gained IPv6LL Nov 1 01:01:52.477376 env[1425]: time="2025-11-01T01:01:52.477316506Z" level=info msg="StopPodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\"" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.546 [INFO][4709] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.547 [INFO][4709] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" iface="eth0" netns="/var/run/netns/cni-f6121888-6379-78c8-68a5-8ed49aae08ca" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.548 [INFO][4709] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" iface="eth0" netns="/var/run/netns/cni-f6121888-6379-78c8-68a5-8ed49aae08ca" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.548 [INFO][4709] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" iface="eth0" netns="/var/run/netns/cni-f6121888-6379-78c8-68a5-8ed49aae08ca" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.548 [INFO][4709] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.549 [INFO][4709] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.596 [INFO][4716] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.596 [INFO][4716] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.597 [INFO][4716] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.609 [WARNING][4716] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.609 [INFO][4716] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.622 [INFO][4716] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:52.627182 env[1425]: 2025-11-01 01:01:52.625 [INFO][4709] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:01:52.631939 env[1425]: time="2025-11-01T01:01:52.631888200Z" level=info msg="TearDown network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\" successfully" Nov 1 01:01:52.632103 env[1425]: time="2025-11-01T01:01:52.632078402Z" level=info msg="StopPodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\" returns successfully" Nov 1 01:01:52.633110 env[1425]: time="2025-11-01T01:01:52.633077811Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-88f7866b5-knct7,Uid:e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3,Namespace:calico-apiserver,Attempt:1,}" Nov 1 01:01:52.634276 systemd[1]: run-netns-cni\x2df6121888\x2d6379\x2d78c8\x2d68a5\x2d8ed49aae08ca.mount: Deactivated successfully. Nov 1 01:01:52.874792 systemd-networkd[1577]: cali8c016d14c6b: Link UP Nov 1 01:01:52.890941 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 01:01:52.891044 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8c016d14c6b: link becomes ready Nov 1 01:01:52.892816 systemd-networkd[1577]: cali8c016d14c6b: Gained carrier Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.757 [INFO][4722] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0 calico-apiserver-88f7866b5- calico-apiserver e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3 1092 0 2025-11-01 01:00:45 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:88f7866b5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-9d78d981c4 calico-apiserver-88f7866b5-knct7 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8c016d14c6b [] [] }} ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-knct7" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.760 [INFO][4722] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-knct7" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.800 [INFO][4735] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" HandleID="k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.801 [INFO][4735] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" HandleID="k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccfe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-9d78d981c4", "pod":"calico-apiserver-88f7866b5-knct7", "timestamp":"2025-11-01 01:01:52.800793824 +0000 UTC"}, Hostname:"ci-3510.3.8-n-9d78d981c4", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.801 [INFO][4735] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.801 [INFO][4735] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.801 [INFO][4735] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-9d78d981c4' Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.815 [INFO][4735] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.820 [INFO][4735] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.828 [INFO][4735] ipam/ipam.go 511: Trying affinity for 192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.830 [INFO][4735] ipam/ipam.go 158: Attempting to load block cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.833 [INFO][4735] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.95.0/26 host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.833 [INFO][4735] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.95.0/26 handle="k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.838 [INFO][4735] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.848 [INFO][4735] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.95.0/26 handle="k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.861 [INFO][4735] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.95.8/26] block=192.168.95.0/26 handle="k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.861 [INFO][4735] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.95.8/26] handle="k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" host="ci-3510.3.8-n-9d78d981c4" Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.861 [INFO][4735] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:01:52.911311 env[1425]: 2025-11-01 01:01:52.861 [INFO][4735] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.95.8/26] IPv6=[] ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" HandleID="k8s-pod-network.a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.912284 env[1425]: 2025-11-01 01:01:52.862 [INFO][4722] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-knct7" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0", GenerateName:"calico-apiserver-88f7866b5-", Namespace:"calico-apiserver", SelfLink:"", UID:"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3", ResourceVersion:"1092", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"88f7866b5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"", Pod:"calico-apiserver-88f7866b5-knct7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.95.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8c016d14c6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:52.912284 env[1425]: 2025-11-01 01:01:52.862 [INFO][4722] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.95.8/32] ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-knct7" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.912284 env[1425]: 2025-11-01 01:01:52.862 [INFO][4722] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8c016d14c6b ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-knct7" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.912284 env[1425]: 2025-11-01 01:01:52.893 [INFO][4722] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-knct7" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.912284 env[1425]: 2025-11-01 01:01:52.894 [INFO][4722] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-knct7" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0", GenerateName:"calico-apiserver-88f7866b5-", Namespace:"calico-apiserver", SelfLink:"", UID:"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3", ResourceVersion:"1092", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"88f7866b5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c", Pod:"calico-apiserver-88f7866b5-knct7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.95.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8c016d14c6b", MAC:"0e:52:91:41:ee:1a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:01:52.912284 env[1425]: 2025-11-01 01:01:52.909 [INFO][4722] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c" Namespace="calico-apiserver" Pod="calico-apiserver-88f7866b5-knct7" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:01:52.930224 env[1425]: time="2025-11-01T01:01:52.930044690Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 01:01:52.930224 env[1425]: time="2025-11-01T01:01:52.930086690Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 01:01:52.930224 env[1425]: time="2025-11-01T01:01:52.930098990Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 01:01:52.930623 env[1425]: time="2025-11-01T01:01:52.930551894Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c pid=4755 runtime=io.containerd.runc.v2 Nov 1 01:01:52.977557 systemd[1]: Started cri-containerd-a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c.scope. Nov 1 01:01:53.017000 audit[4778]: NETFILTER_CFG table=filter:130 family=2 entries=53 op=nft_register_chain pid=4778 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 01:01:53.017000 audit[4778]: SYSCALL arch=c000003e syscall=46 success=yes exit=26624 a0=3 a1=7fff7bf7bf40 a2=0 a3=7fff7bf7bf2c items=0 ppid=4073 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:53.017000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.034000 audit: BPF prog-id=201 op=LOAD Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4755 pid=4765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:53.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136653536653538633561316362666131646630393838396562383462 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=4755 pid=4765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:53.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136653536653538633561316362666131646630393838396562383462 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit: BPF prog-id=202 op=LOAD Nov 1 01:01:53.035000 audit[4765]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000024c70 items=0 ppid=4755 pid=4765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:53.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136653536653538633561316362666131646630393838396562383462 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit: BPF prog-id=203 op=LOAD Nov 1 01:01:53.035000 audit[4765]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000024cb8 items=0 ppid=4755 pid=4765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:53.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136653536653538633561316362666131646630393838396562383462 Nov 1 01:01:53.035000 audit: BPF prog-id=203 op=UNLOAD Nov 1 01:01:53.035000 audit: BPF prog-id=202 op=UNLOAD Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { perfmon } for pid=4765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit[4765]: AVC avc: denied { bpf } for pid=4765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 01:01:53.035000 audit: BPF prog-id=204 op=LOAD Nov 1 01:01:53.035000 audit[4765]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0000250c8 items=0 ppid=4755 pid=4765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:53.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136653536653538633561316362666131646630393838396562383462 Nov 1 01:01:53.080514 env[1425]: time="2025-11-01T01:01:53.080465943Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-88f7866b5-knct7,Uid:e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c\"" Nov 1 01:01:53.083105 env[1425]: time="2025-11-01T01:01:53.083074266Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 01:01:53.348295 env[1425]: time="2025-11-01T01:01:53.348228445Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:53.352524 env[1425]: time="2025-11-01T01:01:53.352449183Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 01:01:53.352856 kubelet[2460]: E1101 01:01:53.352807 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:01:53.353265 kubelet[2460]: E1101 01:01:53.352871 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:01:53.353512 kubelet[2460]: E1101 01:01:53.353445 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7pbkx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-88f7866b5-knct7_calico-apiserver(e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:53.354671 kubelet[2460]: E1101 01:01:53.354629 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:01:53.480490 env[1425]: time="2025-11-01T01:01:53.480423332Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 01:01:53.741266 kubelet[2460]: E1101 01:01:53.741222 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:01:53.760269 env[1425]: time="2025-11-01T01:01:53.760191742Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:53.767622 env[1425]: time="2025-11-01T01:01:53.767476108Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 01:01:53.767824 kubelet[2460]: E1101 01:01:53.767789 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:01:53.767921 kubelet[2460]: E1101 01:01:53.767832 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:01:53.768039 kubelet[2460]: E1101 01:01:53.767990 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a7462746e0174c6e871c02909e388a73,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:53.770205 env[1425]: time="2025-11-01T01:01:53.770175532Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 01:01:53.787000 audit[4792]: NETFILTER_CFG table=filter:131 family=2 entries=14 op=nft_register_rule pid=4792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:53.787000 audit[4792]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe6fa9dea0 a2=0 a3=7ffe6fa9de8c items=0 ppid=2565 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:53.787000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:53.790000 audit[4792]: NETFILTER_CFG table=nat:132 family=2 entries=20 op=nft_register_rule pid=4792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:01:53.790000 audit[4792]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe6fa9dea0 a2=0 a3=7ffe6fa9de8c items=0 ppid=2565 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:01:53.790000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:01:53.937598 systemd-networkd[1577]: cali8c016d14c6b: Gained IPv6LL Nov 1 01:01:54.040128 env[1425]: time="2025-11-01T01:01:54.039987751Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:54.043650 env[1425]: time="2025-11-01T01:01:54.043520283Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 01:01:54.044048 kubelet[2460]: E1101 01:01:54.044009 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:01:54.044146 kubelet[2460]: E1101 01:01:54.044063 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:01:54.044265 kubelet[2460]: E1101 01:01:54.044228 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:54.045887 kubelet[2460]: E1101 01:01:54.045801 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:01:54.744455 kubelet[2460]: E1101 01:01:54.744398 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:01:55.479079 env[1425]: time="2025-11-01T01:01:55.479034080Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 01:01:55.756822 env[1425]: time="2025-11-01T01:01:55.756687647Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:55.776797 env[1425]: time="2025-11-01T01:01:55.776647025Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 01:01:55.777090 kubelet[2460]: E1101 01:01:55.777050 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:01:55.777515 kubelet[2460]: E1101 01:01:55.777105 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:01:55.777515 kubelet[2460]: E1101 01:01:55.777250 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:55.779707 env[1425]: time="2025-11-01T01:01:55.779671352Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 01:01:56.061162 env[1425]: time="2025-11-01T01:01:56.061022549Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:01:56.064646 env[1425]: time="2025-11-01T01:01:56.064564280Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 01:01:56.065151 kubelet[2460]: E1101 01:01:56.065079 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:01:56.065327 kubelet[2460]: E1101 01:01:56.065301 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:01:56.066061 kubelet[2460]: E1101 01:01:56.065996 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 01:01:56.067441 kubelet[2460]: E1101 01:01:56.067390 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:02:01.478991 env[1425]: time="2025-11-01T01:02:01.478932383Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 01:02:01.736878 env[1425]: time="2025-11-01T01:02:01.736713314Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:01.745348 env[1425]: time="2025-11-01T01:02:01.745276488Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 01:02:01.745598 kubelet[2460]: E1101 01:02:01.745555 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:02:01.745948 kubelet[2460]: E1101 01:02:01.745616 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:02:01.745948 kubelet[2460]: E1101 01:02:01.745777 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nlxhs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-77948f7547-899dr_calico-system(25c95b45-63cd-474c-ab3f-810f3121d2f5): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:01.747220 kubelet[2460]: E1101 01:02:01.747163 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:02:02.478733 env[1425]: time="2025-11-01T01:02:02.478392816Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 01:02:02.741119 env[1425]: time="2025-11-01T01:02:02.740979279Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:02.745581 env[1425]: time="2025-11-01T01:02:02.745420417Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 01:02:02.745952 kubelet[2460]: E1101 01:02:02.745907 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 01:02:02.746441 kubelet[2460]: E1101 01:02:02.746391 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 01:02:02.746790 kubelet[2460]: E1101 01:02:02.746730 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kmkfz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-nk2dv_calico-system(4e3f47c8-00e9-4d23-af1c-56111466a677): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:02.748189 kubelet[2460]: E1101 01:02:02.748136 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:02:03.479032 env[1425]: time="2025-11-01T01:02:03.478695051Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 01:02:03.744321 env[1425]: time="2025-11-01T01:02:03.744165625Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:03.754503 env[1425]: time="2025-11-01T01:02:03.754427408Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 01:02:03.754743 kubelet[2460]: E1101 01:02:03.754699 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:02:03.755069 kubelet[2460]: E1101 01:02:03.754749 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:02:03.755069 kubelet[2460]: E1101 01:02:03.754912 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-qrqpb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-88f7866b5-794bz_calico-apiserver(56dcd17c-f13d-4889-8b88-69d06e438fd0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:03.756896 kubelet[2460]: E1101 01:02:03.756857 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:02:04.478265 kubelet[2460]: E1101 01:02:04.478179 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:02:07.478836 kubelet[2460]: E1101 01:02:07.478775 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:02:08.478352 env[1425]: time="2025-11-01T01:02:08.477986226Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 01:02:08.750890 env[1425]: time="2025-11-01T01:02:08.750725010Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:08.754825 env[1425]: time="2025-11-01T01:02:08.754648920Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 01:02:08.755175 kubelet[2460]: E1101 01:02:08.755123 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:02:08.755678 kubelet[2460]: E1101 01:02:08.755192 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:02:08.755678 kubelet[2460]: E1101 01:02:08.755401 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7pbkx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-88f7866b5-knct7_calico-apiserver(e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:08.757136 kubelet[2460]: E1101 01:02:08.757089 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:02:14.478278 kubelet[2460]: E1101 01:02:14.478237 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:02:17.477786 kubelet[2460]: E1101 01:02:17.477737 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:02:17.479351 kubelet[2460]: E1101 01:02:17.479298 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:02:18.479060 env[1425]: time="2025-11-01T01:02:18.478711472Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 01:02:18.767532 env[1425]: time="2025-11-01T01:02:18.767388406Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:18.771569 env[1425]: time="2025-11-01T01:02:18.771508702Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 01:02:18.771816 kubelet[2460]: E1101 01:02:18.771775 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:02:18.772197 kubelet[2460]: E1101 01:02:18.771832 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:02:18.772197 kubelet[2460]: E1101 01:02:18.772056 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:18.772780 env[1425]: time="2025-11-01T01:02:18.772747961Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 01:02:19.032587 env[1425]: time="2025-11-01T01:02:19.032440599Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:19.035899 env[1425]: time="2025-11-01T01:02:19.035812458Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 01:02:19.036316 kubelet[2460]: E1101 01:02:19.036278 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:02:19.036509 kubelet[2460]: E1101 01:02:19.036483 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:02:19.036834 kubelet[2460]: E1101 01:02:19.036781 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a7462746e0174c6e871c02909e388a73,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:19.037553 env[1425]: time="2025-11-01T01:02:19.037508038Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 01:02:19.306177 env[1425]: time="2025-11-01T01:02:19.306025468Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:19.311215 env[1425]: time="2025-11-01T01:02:19.311142309Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 01:02:19.311748 kubelet[2460]: E1101 01:02:19.311691 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:02:19.311932 kubelet[2460]: E1101 01:02:19.311910 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:02:19.312366 kubelet[2460]: E1101 01:02:19.312290 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:19.313162 env[1425]: time="2025-11-01T01:02:19.313131702Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 01:02:19.313737 kubelet[2460]: E1101 01:02:19.313699 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:02:19.576908 env[1425]: time="2025-11-01T01:02:19.576541292Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:19.589565 env[1425]: time="2025-11-01T01:02:19.589432999Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 01:02:19.589907 kubelet[2460]: E1101 01:02:19.589858 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:02:19.590075 kubelet[2460]: E1101 01:02:19.590055 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:02:19.590369 kubelet[2460]: E1101 01:02:19.590296 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:19.592124 kubelet[2460]: E1101 01:02:19.592070 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:02:23.480504 kubelet[2460]: E1101 01:02:23.480452 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:02:24.780000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:24.785240 kernel: kauditd_printk_skb: 374 callbacks suppressed Nov 1 01:02:24.785417 kernel: audit: type=1400 audit(1761958944.780:1325): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:24.780000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:24.815166 kernel: audit: type=1400 audit(1761958944.780:1324): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:24.780000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f678c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:24.835579 kernel: audit: type=1300 audit(1761958944.780:1324): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f678c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:24.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:24.853026 kernel: audit: type=1327 audit(1761958944.780:1324): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:24.853110 kernel: audit: type=1300 audit(1761958944.780:1325): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012a2600 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:24.780000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012a2600 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:24.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:24.890707 kernel: audit: type=1327 audit(1761958944.780:1325): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:25.382000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:25.401361 kernel: audit: type=1400 audit(1761958945.382:1326): avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:25.382000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:25.425545 kernel: audit: type=1400 audit(1761958945.382:1327): avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:25.382000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0153a6780 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:02:25.454705 kernel: audit: type=1300 audit(1761958945.382:1327): arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0153a6780 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:02:25.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:02:25.474355 kernel: audit: type=1327 audit(1761958945.382:1327): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:02:25.382000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c011616040 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:02:25.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:02:25.449000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7416 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:25.449000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c001295980 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:02:25.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:02:25.449000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7410 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:25.449000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c001295c80 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:02:25.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:02:25.453000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:25.453000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00579e780 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:02:25.453000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:02:25.454000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:25.454000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00f9f8ee0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:02:25.454000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:02:29.479164 env[1425]: time="2025-11-01T01:02:29.478846353Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 01:02:29.511262 env[1425]: time="2025-11-01T01:02:29.511215315Z" level=info msg="StopPodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\"" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.576 [WARNING][4847] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.577 [INFO][4847] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.577 [INFO][4847] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" iface="eth0" netns="" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.577 [INFO][4847] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.577 [INFO][4847] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.611 [INFO][4854] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.612 [INFO][4854] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.612 [INFO][4854] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.617 [WARNING][4854] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.617 [INFO][4854] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.618 [INFO][4854] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:29.622373 env[1425]: 2025-11-01 01:02:29.620 [INFO][4847] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:02:29.623164 env[1425]: time="2025-11-01T01:02:29.623108423Z" level=info msg="TearDown network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\" successfully" Nov 1 01:02:29.623558 env[1425]: time="2025-11-01T01:02:29.623522941Z" level=info msg="StopPodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\" returns successfully" Nov 1 01:02:29.624443 env[1425]: time="2025-11-01T01:02:29.624410678Z" level=info msg="RemovePodSandbox for \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\"" Nov 1 01:02:29.624689 env[1425]: time="2025-11-01T01:02:29.624633887Z" level=info msg="Forcibly stopping sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\"" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.670 [WARNING][4869] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" WorkloadEndpoint="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.670 [INFO][4869] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.670 [INFO][4869] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" iface="eth0" netns="" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.670 [INFO][4869] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.670 [INFO][4869] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.706 [INFO][4876] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.706 [INFO][4876] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.706 [INFO][4876] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.715 [WARNING][4876] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.715 [INFO][4876] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" HandleID="k8s-pod-network.7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-whisker--6b56874c99--xwjgw-eth0" Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.720 [INFO][4876] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:29.723883 env[1425]: 2025-11-01 01:02:29.722 [INFO][4869] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b" Nov 1 01:02:29.724540 env[1425]: time="2025-11-01T01:02:29.723933066Z" level=info msg="TearDown network for sandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\" successfully" Nov 1 01:02:29.735888 env[1425]: time="2025-11-01T01:02:29.735784965Z" level=info msg="RemovePodSandbox \"7cc0146a6636a73b015d9c0897e6537c180a17aa3b98893291c70a2723f59f4b\" returns successfully" Nov 1 01:02:29.736659 env[1425]: time="2025-11-01T01:02:29.736626500Z" level=info msg="StopPodSandbox for \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\"" Nov 1 01:02:29.743745 env[1425]: time="2025-11-01T01:02:29.743705198Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:29.749164 env[1425]: time="2025-11-01T01:02:29.749106625Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 01:02:29.753355 kubelet[2460]: E1101 01:02:29.749413 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:02:29.753355 kubelet[2460]: E1101 01:02:29.749470 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:02:29.753355 kubelet[2460]: E1101 01:02:29.749745 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nlxhs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-77948f7547-899dr_calico-system(25c95b45-63cd-474c-ab3f-810f3121d2f5): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:29.753355 kubelet[2460]: E1101 01:02:29.752074 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:02:29.757695 env[1425]: time="2025-11-01T01:02:29.757662985Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.807 [WARNING][4890] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a3eea3d5-3f7d-4258-b436-9bce8adfc837", ResourceVersion:"1220", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc", Pod:"csi-node-driver-hxt4l", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.95.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidf9769f6524", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.807 [INFO][4890] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.807 [INFO][4890] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" iface="eth0" netns="" Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.807 [INFO][4890] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.807 [INFO][4890] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.842 [INFO][4897] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.842 [INFO][4897] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.842 [INFO][4897] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.850 [WARNING][4897] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.850 [INFO][4897] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.851 [INFO][4897] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:29.855363 env[1425]: 2025-11-01 01:02:29.853 [INFO][4890] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:02:29.855987 env[1425]: time="2025-11-01T01:02:29.855403698Z" level=info msg="TearDown network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\" successfully" Nov 1 01:02:29.855987 env[1425]: time="2025-11-01T01:02:29.855441000Z" level=info msg="StopPodSandbox for \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\" returns successfully" Nov 1 01:02:29.856262 env[1425]: time="2025-11-01T01:02:29.856229833Z" level=info msg="RemovePodSandbox for \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\"" Nov 1 01:02:29.856384 env[1425]: time="2025-11-01T01:02:29.856269235Z" level=info msg="Forcibly stopping sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\"" Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.926 [WARNING][4913] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a3eea3d5-3f7d-4258-b436-9bce8adfc837", ResourceVersion:"1220", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"a6f56a1c08760a2c17597ee5cc4703075618af3c9f6f4bb09a65c653beea50dc", Pod:"csi-node-driver-hxt4l", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.95.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidf9769f6524", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.926 [INFO][4913] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.926 [INFO][4913] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" iface="eth0" netns="" Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.926 [INFO][4913] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.926 [INFO][4913] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.966 [INFO][4920] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.967 [INFO][4920] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.967 [INFO][4920] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.983 [WARNING][4920] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.983 [INFO][4920] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" HandleID="k8s-pod-network.71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-csi--node--driver--hxt4l-eth0" Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.985 [INFO][4920] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:29.990791 env[1425]: 2025-11-01 01:02:29.987 [INFO][4913] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f" Nov 1 01:02:29.991676 env[1425]: time="2025-11-01T01:02:29.991628431Z" level=info msg="TearDown network for sandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\" successfully" Nov 1 01:02:30.001293 env[1425]: time="2025-11-01T01:02:30.001238235Z" level=info msg="RemovePodSandbox \"71e25a55ad1256c658edc4d56533c5f46ed74d52ee2ba5076e45b82bd829ef2f\" returns successfully" Nov 1 01:02:30.002055 env[1425]: time="2025-11-01T01:02:30.002026367Z" level=info msg="StopPodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\"" Nov 1 01:02:30.036794 env[1425]: time="2025-11-01T01:02:30.036744613Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:30.040314 env[1425]: time="2025-11-01T01:02:30.040262859Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 01:02:30.041373 kubelet[2460]: E1101 01:02:30.040657 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 01:02:30.041373 kubelet[2460]: E1101 01:02:30.040721 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 01:02:30.041373 kubelet[2460]: E1101 01:02:30.040896 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kmkfz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-nk2dv_calico-system(4e3f47c8-00e9-4d23-af1c-56111466a677): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:30.042562 kubelet[2460]: E1101 01:02:30.042472 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.067 [WARNING][4935] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0", GenerateName:"calico-apiserver-88f7866b5-", Namespace:"calico-apiserver", SelfLink:"", UID:"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3", ResourceVersion:"1237", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"88f7866b5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c", Pod:"calico-apiserver-88f7866b5-knct7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.95.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8c016d14c6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.067 [INFO][4935] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.067 [INFO][4935] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" iface="eth0" netns="" Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.067 [INFO][4935] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.067 [INFO][4935] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.104 [INFO][4942] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.105 [INFO][4942] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.105 [INFO][4942] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.112 [WARNING][4942] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.112 [INFO][4942] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.114 [INFO][4942] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.117900 env[1425]: 2025-11-01 01:02:30.116 [INFO][4935] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:02:30.118634 env[1425]: time="2025-11-01T01:02:30.117940092Z" level=info msg="TearDown network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\" successfully" Nov 1 01:02:30.118634 env[1425]: time="2025-11-01T01:02:30.117978894Z" level=info msg="StopPodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\" returns successfully" Nov 1 01:02:30.118634 env[1425]: time="2025-11-01T01:02:30.118552718Z" level=info msg="RemovePodSandbox for \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\"" Nov 1 01:02:30.118634 env[1425]: time="2025-11-01T01:02:30.118590220Z" level=info msg="Forcibly stopping sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\"" Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.170 [WARNING][4956] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0", GenerateName:"calico-apiserver-88f7866b5-", Namespace:"calico-apiserver", SelfLink:"", UID:"e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3", ResourceVersion:"1237", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"88f7866b5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"a6e56e58c5a1cbfa1df09889eb84bcba879fa68bf2fb86b7071d025ce3887c5c", Pod:"calico-apiserver-88f7866b5-knct7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.95.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8c016d14c6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.170 [INFO][4956] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.170 [INFO][4956] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" iface="eth0" netns="" Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.170 [INFO][4956] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.170 [INFO][4956] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.202 [INFO][4963] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.202 [INFO][4963] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.202 [INFO][4963] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.210 [WARNING][4963] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.210 [INFO][4963] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" HandleID="k8s-pod-network.8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--knct7-eth0" Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.212 [INFO][4963] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.215774 env[1425]: 2025-11-01 01:02:30.213 [INFO][4956] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f" Nov 1 01:02:30.215774 env[1425]: time="2025-11-01T01:02:30.215467352Z" level=info msg="TearDown network for sandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\" successfully" Nov 1 01:02:30.224227 env[1425]: time="2025-11-01T01:02:30.224169314Z" level=info msg="RemovePodSandbox \"8551674c0cfd6fd11a141aff9528173b5959e555a81f6f65f300973e198cfb4f\" returns successfully" Nov 1 01:02:30.224738 env[1425]: time="2025-11-01T01:02:30.224715537Z" level=info msg="StopPodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\"" Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.258 [WARNING][4978] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0", GenerateName:"calico-apiserver-88f7866b5-", Namespace:"calico-apiserver", SelfLink:"", UID:"56dcd17c-f13d-4889-8b88-69d06e438fd0", ResourceVersion:"1210", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"88f7866b5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3", Pod:"calico-apiserver-88f7866b5-794bz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.95.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic5e72a3620a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.258 [INFO][4978] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.258 [INFO][4978] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" iface="eth0" netns="" Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.258 [INFO][4978] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.258 [INFO][4978] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.285 [INFO][4986] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.285 [INFO][4986] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.285 [INFO][4986] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.292 [WARNING][4986] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.292 [INFO][4986] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.293 [INFO][4986] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.296249 env[1425]: 2025-11-01 01:02:30.294 [INFO][4978] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:02:30.297059 env[1425]: time="2025-11-01T01:02:30.297017147Z" level=info msg="TearDown network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\" successfully" Nov 1 01:02:30.297211 env[1425]: time="2025-11-01T01:02:30.297185854Z" level=info msg="StopPodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\" returns successfully" Nov 1 01:02:30.298418 env[1425]: time="2025-11-01T01:02:30.298321401Z" level=info msg="RemovePodSandbox for \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\"" Nov 1 01:02:30.298536 env[1425]: time="2025-11-01T01:02:30.298447506Z" level=info msg="Forcibly stopping sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\"" Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.332 [WARNING][5000] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0", GenerateName:"calico-apiserver-88f7866b5-", Namespace:"calico-apiserver", SelfLink:"", UID:"56dcd17c-f13d-4889-8b88-69d06e438fd0", ResourceVersion:"1210", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"88f7866b5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"8b96c4d65d5318daa357d3959e1bfff24abfe5204589f0b00a969c875c77d8e3", Pod:"calico-apiserver-88f7866b5-794bz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.95.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic5e72a3620a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.332 [INFO][5000] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.332 [INFO][5000] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" iface="eth0" netns="" Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.332 [INFO][5000] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.332 [INFO][5000] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.352 [INFO][5007] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.353 [INFO][5007] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.353 [INFO][5007] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.358 [WARNING][5007] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.358 [INFO][5007] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" HandleID="k8s-pod-network.ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--apiserver--88f7866b5--794bz-eth0" Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.360 [INFO][5007] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.362445 env[1425]: 2025-11-01 01:02:30.361 [INFO][5000] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b" Nov 1 01:02:30.363141 env[1425]: time="2025-11-01T01:02:30.362486672Z" level=info msg="TearDown network for sandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\" successfully" Nov 1 01:02:30.373147 env[1425]: time="2025-11-01T01:02:30.373106114Z" level=info msg="RemovePodSandbox \"ac780fb58c23cd2ea16ebceb480a99ba25e016e5ccdcde0caa44a72fa890628b\" returns successfully" Nov 1 01:02:30.373671 env[1425]: time="2025-11-01T01:02:30.373639136Z" level=info msg="StopPodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\"" Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.409 [WARNING][5021] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"9496b934-0cb3-4fbd-9030-ca901c84f793", ResourceVersion:"1073", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609", Pod:"coredns-668d6bf9bc-j8n8l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.95.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7a7ca7a0e0f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.409 [INFO][5021] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.409 [INFO][5021] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" iface="eth0" netns="" Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.409 [INFO][5021] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.409 [INFO][5021] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.437 [INFO][5029] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.437 [INFO][5029] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.437 [INFO][5029] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.443 [WARNING][5029] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.443 [INFO][5029] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.445 [INFO][5029] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.447635 env[1425]: 2025-11-01 01:02:30.446 [INFO][5021] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:02:30.448315 env[1425]: time="2025-11-01T01:02:30.447672118Z" level=info msg="TearDown network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\" successfully" Nov 1 01:02:30.448315 env[1425]: time="2025-11-01T01:02:30.447709620Z" level=info msg="StopPodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\" returns successfully" Nov 1 01:02:30.448613 env[1425]: time="2025-11-01T01:02:30.448580656Z" level=info msg="RemovePodSandbox for \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\"" Nov 1 01:02:30.448714 env[1425]: time="2025-11-01T01:02:30.448620357Z" level=info msg="Forcibly stopping sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\"" Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.492 [WARNING][5043] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"9496b934-0cb3-4fbd-9030-ca901c84f793", ResourceVersion:"1073", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"42e7de7f4c1117674d18e62be0e2ca6750558b2f89f3c22024bd54fbb968c609", Pod:"coredns-668d6bf9bc-j8n8l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.95.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7a7ca7a0e0f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.492 [INFO][5043] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.492 [INFO][5043] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" iface="eth0" netns="" Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.492 [INFO][5043] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.492 [INFO][5043] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.530 [INFO][5050] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.530 [INFO][5050] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.530 [INFO][5050] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.544 [WARNING][5050] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.544 [INFO][5050] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" HandleID="k8s-pod-network.1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--j8n8l-eth0" Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.545 [INFO][5050] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.550322 env[1425]: 2025-11-01 01:02:30.547 [INFO][5043] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a" Nov 1 01:02:30.550322 env[1425]: time="2025-11-01T01:02:30.550298090Z" level=info msg="TearDown network for sandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\" successfully" Nov 1 01:02:30.563712 env[1425]: time="2025-11-01T01:02:30.563634045Z" level=info msg="RemovePodSandbox \"1565564a73f98394f572d681ee524c2c1c912f903e02a0020b7e1b86b63dd66a\" returns successfully" Nov 1 01:02:30.564459 env[1425]: time="2025-11-01T01:02:30.564428478Z" level=info msg="StopPodSandbox for \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\"" Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.625 [WARNING][5064] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"83c13b51-0c6a-45c0-b7f7-16b452c52e64", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e", Pod:"coredns-668d6bf9bc-rb8hl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.95.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicebba79ad4a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.625 [INFO][5064] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.625 [INFO][5064] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" iface="eth0" netns="" Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.625 [INFO][5064] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.625 [INFO][5064] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.648 [INFO][5071] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.648 [INFO][5071] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.648 [INFO][5071] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.659 [WARNING][5071] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.659 [INFO][5071] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.662 [INFO][5071] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.664647 env[1425]: 2025-11-01 01:02:30.663 [INFO][5064] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:02:30.665531 env[1425]: time="2025-11-01T01:02:30.665478984Z" level=info msg="TearDown network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\" successfully" Nov 1 01:02:30.665672 env[1425]: time="2025-11-01T01:02:30.665650592Z" level=info msg="StopPodSandbox for \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\" returns successfully" Nov 1 01:02:30.666478 env[1425]: time="2025-11-01T01:02:30.666445425Z" level=info msg="RemovePodSandbox for \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\"" Nov 1 01:02:30.666848 env[1425]: time="2025-11-01T01:02:30.666790739Z" level=info msg="Forcibly stopping sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\"" Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.723 [WARNING][5087] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"83c13b51-0c6a-45c0-b7f7-16b452c52e64", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"9121310ccd3d9ac1e36d86cd27da11f9e245ad83b0f4359db7248f01ce9e932e", Pod:"coredns-668d6bf9bc-rb8hl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.95.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicebba79ad4a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.723 [INFO][5087] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.723 [INFO][5087] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" iface="eth0" netns="" Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.723 [INFO][5087] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.723 [INFO][5087] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.756 [INFO][5094] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.756 [INFO][5094] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.756 [INFO][5094] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.765 [WARNING][5094] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.765 [INFO][5094] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" HandleID="k8s-pod-network.c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Workload="ci--3510.3.8--n--9d78d981c4-k8s-coredns--668d6bf9bc--rb8hl-eth0" Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.766 [INFO][5094] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.769613 env[1425]: 2025-11-01 01:02:30.768 [INFO][5087] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46" Nov 1 01:02:30.770358 env[1425]: time="2025-11-01T01:02:30.769657821Z" level=info msg="TearDown network for sandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\" successfully" Nov 1 01:02:30.778306 env[1425]: time="2025-11-01T01:02:30.778260579Z" level=info msg="RemovePodSandbox \"c275e20945a5702ce1aed836df06a351e1721b8d31cdcab3fa4208db6b654e46\" returns successfully" Nov 1 01:02:30.778926 env[1425]: time="2025-11-01T01:02:30.778890005Z" level=info msg="StopPodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\"" Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.854 [WARNING][5108] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"4e3f47c8-00e9-4d23-af1c-56111466a677", ResourceVersion:"1253", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8", Pod:"goldmane-666569f655-nk2dv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.95.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali63b39474519", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.855 [INFO][5108] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.855 [INFO][5108] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" iface="eth0" netns="" Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.855 [INFO][5108] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.855 [INFO][5108] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.912 [INFO][5115] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.912 [INFO][5115] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.913 [INFO][5115] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.933 [WARNING][5115] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.933 [INFO][5115] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.935 [INFO][5115] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:30.938562 env[1425]: 2025-11-01 01:02:30.936 [INFO][5108] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:02:30.938562 env[1425]: time="2025-11-01T01:02:30.938532151Z" level=info msg="TearDown network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\" successfully" Nov 1 01:02:30.939372 env[1425]: time="2025-11-01T01:02:30.938571752Z" level=info msg="StopPodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\" returns successfully" Nov 1 01:02:30.940463 env[1425]: time="2025-11-01T01:02:30.940430630Z" level=info msg="RemovePodSandbox for \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\"" Nov 1 01:02:30.940598 env[1425]: time="2025-11-01T01:02:30.940471231Z" level=info msg="Forcibly stopping sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\"" Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.056 [WARNING][5130] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"4e3f47c8-00e9-4d23-af1c-56111466a677", ResourceVersion:"1253", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"823f38c8893c28788b52663b61350150799f30a16fb69d5d5bbff877ade839d8", Pod:"goldmane-666569f655-nk2dv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.95.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali63b39474519", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.057 [INFO][5130] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.057 [INFO][5130] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" iface="eth0" netns="" Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.057 [INFO][5130] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.057 [INFO][5130] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.093 [INFO][5138] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.093 [INFO][5138] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.093 [INFO][5138] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.101 [WARNING][5138] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.101 [INFO][5138] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" HandleID="k8s-pod-network.ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Workload="ci--3510.3.8--n--9d78d981c4-k8s-goldmane--666569f655--nk2dv-eth0" Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.102 [INFO][5138] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:31.105782 env[1425]: 2025-11-01 01:02:31.104 [INFO][5130] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a" Nov 1 01:02:31.106495 env[1425]: time="2025-11-01T01:02:31.105813567Z" level=info msg="TearDown network for sandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\" successfully" Nov 1 01:02:31.117200 env[1425]: time="2025-11-01T01:02:31.117149534Z" level=info msg="RemovePodSandbox \"ba00a58e6159e88e3b5f57cb6c45a7f6d2f0a3d2bcf6b54ab0ab370542a1be8a\" returns successfully" Nov 1 01:02:31.117759 env[1425]: time="2025-11-01T01:02:31.117722457Z" level=info msg="StopPodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\"" Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.166 [WARNING][5153] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0", GenerateName:"calico-kube-controllers-77948f7547-", Namespace:"calico-system", SelfLink:"", UID:"25c95b45-63cd-474c-ab3f-810f3121d2f5", ResourceVersion:"1251", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"77948f7547", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8", Pod:"calico-kube-controllers-77948f7547-899dr", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.95.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicf3bb575118", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.166 [INFO][5153] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.166 [INFO][5153] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" iface="eth0" netns="" Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.166 [INFO][5153] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.166 [INFO][5153] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.203 [INFO][5160] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.203 [INFO][5160] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.203 [INFO][5160] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.209 [WARNING][5160] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.209 [INFO][5160] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.211 [INFO][5160] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:31.214524 env[1425]: 2025-11-01 01:02:31.212 [INFO][5153] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:02:31.215070 env[1425]: time="2025-11-01T01:02:31.214569045Z" level=info msg="TearDown network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\" successfully" Nov 1 01:02:31.215070 env[1425]: time="2025-11-01T01:02:31.214604847Z" level=info msg="StopPodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\" returns successfully" Nov 1 01:02:31.215675 env[1425]: time="2025-11-01T01:02:31.215639689Z" level=info msg="RemovePodSandbox for \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\"" Nov 1 01:02:31.215801 env[1425]: time="2025-11-01T01:02:31.215686891Z" level=info msg="Forcibly stopping sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\"" Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.266 [WARNING][5176] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0", GenerateName:"calico-kube-controllers-77948f7547-", Namespace:"calico-system", SelfLink:"", UID:"25c95b45-63cd-474c-ab3f-810f3121d2f5", ResourceVersion:"1251", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 1, 0, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"77948f7547", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-9d78d981c4", ContainerID:"fc7f138ba6b7019d1f2a0c7a0937f475b1493334482cc8757aafe3d05fd5d4e8", Pod:"calico-kube-controllers-77948f7547-899dr", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.95.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicf3bb575118", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.266 [INFO][5176] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.266 [INFO][5176] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" iface="eth0" netns="" Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.266 [INFO][5176] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.266 [INFO][5176] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.300 [INFO][5183] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.301 [INFO][5183] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.301 [INFO][5183] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.309 [WARNING][5183] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.309 [INFO][5183] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" HandleID="k8s-pod-network.92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Workload="ci--3510.3.8--n--9d78d981c4-k8s-calico--kube--controllers--77948f7547--899dr-eth0" Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.311 [INFO][5183] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 01:02:31.314904 env[1425]: 2025-11-01 01:02:31.312 [INFO][5176] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748" Nov 1 01:02:31.315804 env[1425]: time="2025-11-01T01:02:31.315749612Z" level=info msg="TearDown network for sandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\" successfully" Nov 1 01:02:31.325624 env[1425]: time="2025-11-01T01:02:31.325585717Z" level=info msg="RemovePodSandbox \"92a9a6bf1d27c5e542bad88aeed3e3388f1fb90ee81eb49eb515d184c312b748\" returns successfully" Nov 1 01:02:31.480365 env[1425]: time="2025-11-01T01:02:31.480221785Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 01:02:31.756640 env[1425]: time="2025-11-01T01:02:31.756504062Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:31.760113 env[1425]: time="2025-11-01T01:02:31.760037007Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 01:02:31.760386 kubelet[2460]: E1101 01:02:31.760320 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:02:31.760720 kubelet[2460]: E1101 01:02:31.760403 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:02:31.760782 kubelet[2460]: E1101 01:02:31.760696 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-qrqpb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-88f7866b5-794bz_calico-apiserver(56dcd17c-f13d-4889-8b88-69d06e438fd0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:31.762106 kubelet[2460]: E1101 01:02:31.762063 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:02:32.469719 kernel: kauditd_printk_skb: 14 callbacks suppressed Nov 1 01:02:32.469907 kernel: audit: type=1400 audit(1761958952.446:1332): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:32.446000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:32.446000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014f18a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:32.495442 kernel: audit: type=1300 audit(1761958952.446:1332): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014f18a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:32.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:32.515518 kernel: audit: type=1327 audit(1761958952.446:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:32.469000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:32.535353 kernel: audit: type=1400 audit(1761958952.469:1333): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:32.469000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014f18e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:32.560352 kernel: audit: type=1300 audit(1761958952.469:1333): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014f18e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:32.469000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:32.582372 kernel: audit: type=1327 audit(1761958952.469:1333): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:32.470000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:32.470000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014f1e60 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:32.625635 kernel: audit: type=1400 audit(1761958952.470:1334): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:32.625769 kernel: audit: type=1300 audit(1761958952.470:1334): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014f1e60 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:32.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:32.470000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:32.668545 kernel: audit: type=1327 audit(1761958952.470:1334): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:32.668712 kernel: audit: type=1400 audit(1761958952.470:1335): avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:02:32.470000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012a2a00 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:02:32.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:02:33.481004 kubelet[2460]: E1101 01:02:33.480950 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:02:34.478451 kubelet[2460]: E1101 01:02:34.478395 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:02:35.479562 env[1425]: time="2025-11-01T01:02:35.479508338Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 01:02:35.734662 env[1425]: time="2025-11-01T01:02:35.734360194Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:02:35.737941 env[1425]: time="2025-11-01T01:02:35.737804830Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 01:02:35.738259 kubelet[2460]: E1101 01:02:35.738218 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:02:35.738771 kubelet[2460]: E1101 01:02:35.738728 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:02:35.739053 kubelet[2460]: E1101 01:02:35.739001 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7pbkx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-88f7866b5-knct7_calico-apiserver(e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 01:02:35.741390 kubelet[2460]: E1101 01:02:35.741348 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:02:43.478733 kubelet[2460]: E1101 01:02:43.478686 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:02:44.477984 kubelet[2460]: E1101 01:02:44.477940 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:02:45.480810 kubelet[2460]: E1101 01:02:45.480760 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:02:45.481667 kubelet[2460]: E1101 01:02:45.481626 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:02:46.478707 kubelet[2460]: E1101 01:02:46.478659 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:02:49.477833 kubelet[2460]: E1101 01:02:49.477787 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:02:56.478461 kubelet[2460]: E1101 01:02:56.478415 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:02:57.480982 kubelet[2460]: E1101 01:02:57.480746 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:02:57.481524 kubelet[2460]: E1101 01:02:57.481072 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:02:58.478678 kubelet[2460]: E1101 01:02:58.478632 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:02:58.479070 kubelet[2460]: E1101 01:02:58.479044 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:03:04.478238 kubelet[2460]: E1101 01:03:04.478185 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:03:08.478183 kubelet[2460]: E1101 01:03:08.478131 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:03:08.479263 env[1425]: time="2025-11-01T01:03:08.478970390Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 01:03:08.742073 env[1425]: time="2025-11-01T01:03:08.741908848Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:03:08.744850 env[1425]: time="2025-11-01T01:03:08.744782331Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 01:03:08.745125 kubelet[2460]: E1101 01:03:08.745076 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:03:08.745243 kubelet[2460]: E1101 01:03:08.745145 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:03:08.745397 kubelet[2460]: E1101 01:03:08.745316 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 01:03:08.748098 env[1425]: time="2025-11-01T01:03:08.748057025Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 01:03:09.030186 env[1425]: time="2025-11-01T01:03:09.029902019Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:03:09.033765 env[1425]: time="2025-11-01T01:03:09.033603925Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 01:03:09.033975 kubelet[2460]: E1101 01:03:09.033912 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:03:09.034075 kubelet[2460]: E1101 01:03:09.033990 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:03:09.034211 kubelet[2460]: E1101 01:03:09.034162 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 01:03:09.035624 kubelet[2460]: E1101 01:03:09.035562 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:03:09.478741 kubelet[2460]: E1101 01:03:09.478693 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:03:10.477679 env[1425]: time="2025-11-01T01:03:10.477634362Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 01:03:10.743005 env[1425]: time="2025-11-01T01:03:10.742888357Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:03:10.746920 env[1425]: time="2025-11-01T01:03:10.746859269Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 01:03:10.747988 kubelet[2460]: E1101 01:03:10.747282 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:03:10.747988 kubelet[2460]: E1101 01:03:10.747366 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:03:10.747988 kubelet[2460]: E1101 01:03:10.747531 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a7462746e0174c6e871c02909e388a73,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 01:03:10.751073 env[1425]: time="2025-11-01T01:03:10.751029687Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 01:03:11.041269 env[1425]: time="2025-11-01T01:03:11.041103774Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:03:11.045449 env[1425]: time="2025-11-01T01:03:11.045327092Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 01:03:11.046380 kubelet[2460]: E1101 01:03:11.045843 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:03:11.046380 kubelet[2460]: E1101 01:03:11.045898 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:03:11.046380 kubelet[2460]: E1101 01:03:11.046039 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 01:03:11.047590 kubelet[2460]: E1101 01:03:11.047512 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:03:12.479046 env[1425]: time="2025-11-01T01:03:12.478683941Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 01:03:12.747559 env[1425]: time="2025-11-01T01:03:12.747288004Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:03:12.767946 env[1425]: time="2025-11-01T01:03:12.767871676Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 01:03:12.768538 kubelet[2460]: E1101 01:03:12.768486 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:03:12.769027 kubelet[2460]: E1101 01:03:12.769000 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:03:12.769362 kubelet[2460]: E1101 01:03:12.769283 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nlxhs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-77948f7547-899dr_calico-system(25c95b45-63cd-474c-ab3f-810f3121d2f5): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 01:03:12.771118 kubelet[2460]: E1101 01:03:12.771071 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:03:16.685385 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 01:03:16.685546 kernel: audit: type=1130 audit(1761958996.674:1336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.4.8:22-10.200.16.10:33802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:16.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.4.8:22-10.200.16.10:33802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:16.675463 systemd[1]: Started sshd@7-10.200.4.8:22-10.200.16.10:33802.service. Nov 1 01:03:17.260000 audit[5267]: USER_ACCT pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.280070 sshd[5267]: Accepted publickey for core from 10.200.16.10 port 33802 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:17.280537 kernel: audit: type=1101 audit(1761958997.260:1337): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.282067 sshd[5267]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:17.280000 audit[5267]: CRED_ACQ pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.311167 kernel: audit: type=1103 audit(1761958997.280:1338): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.311301 kernel: audit: type=1006 audit(1761958997.280:1339): pid=5267 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 01:03:17.280000 audit[5267]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe36252a70 a2=3 a3=0 items=0 ppid=1 pid=5267 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:17.333799 kernel: audit: type=1300 audit(1761958997.280:1339): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe36252a70 a2=3 a3=0 items=0 ppid=1 pid=5267 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:17.333881 kernel: audit: type=1327 audit(1761958997.280:1339): proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:17.280000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:17.335117 systemd-logind[1416]: New session 10 of user core. Nov 1 01:03:17.341661 systemd[1]: Started session-10.scope. Nov 1 01:03:17.350000 audit[5267]: USER_START pid=5267 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.373364 kernel: audit: type=1105 audit(1761958997.350:1340): pid=5267 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.351000 audit[5269]: CRED_ACQ pid=5269 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.395359 kernel: audit: type=1103 audit(1761958997.351:1341): pid=5269 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.889570 sshd[5267]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:17.889000 audit[5267]: USER_END pid=5267 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.892465 systemd[1]: sshd@7-10.200.4.8:22-10.200.16.10:33802.service: Deactivated successfully. Nov 1 01:03:17.898942 systemd-logind[1416]: Session 10 logged out. Waiting for processes to exit. Nov 1 01:03:17.889000 audit[5267]: CRED_DISP pid=5267 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.911661 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 01:03:17.912991 systemd-logind[1416]: Removed session 10. Nov 1 01:03:17.926880 kernel: audit: type=1106 audit(1761958997.889:1342): pid=5267 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.926983 kernel: audit: type=1104 audit(1761958997.889:1343): pid=5267 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:17.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.4.8:22-10.200.16.10:33802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:18.478689 env[1425]: time="2025-11-01T01:03:18.478638919Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 01:03:18.761358 env[1425]: time="2025-11-01T01:03:18.761216194Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:03:18.765932 env[1425]: time="2025-11-01T01:03:18.765867217Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 01:03:18.766175 kubelet[2460]: E1101 01:03:18.766132 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:03:18.766557 kubelet[2460]: E1101 01:03:18.766188 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:03:18.766557 kubelet[2460]: E1101 01:03:18.766368 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7pbkx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-88f7866b5-knct7_calico-apiserver(e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 01:03:18.767917 kubelet[2460]: E1101 01:03:18.767874 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:03:19.481057 env[1425]: time="2025-11-01T01:03:19.480716126Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 01:03:19.742718 env[1425]: time="2025-11-01T01:03:19.742561897Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:03:19.748861 env[1425]: time="2025-11-01T01:03:19.748799561Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 01:03:19.749074 kubelet[2460]: E1101 01:03:19.749035 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 01:03:19.749169 kubelet[2460]: E1101 01:03:19.749087 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 01:03:19.749314 kubelet[2460]: E1101 01:03:19.749262 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kmkfz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-nk2dv_calico-system(4e3f47c8-00e9-4d23-af1c-56111466a677): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 01:03:19.750899 kubelet[2460]: E1101 01:03:19.750861 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:03:22.477864 env[1425]: time="2025-11-01T01:03:22.477813171Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 01:03:22.478854 kubelet[2460]: E1101 01:03:22.478795 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:03:22.733551 env[1425]: time="2025-11-01T01:03:22.733218418Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:03:22.737383 env[1425]: time="2025-11-01T01:03:22.737176119Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 01:03:22.737728 kubelet[2460]: E1101 01:03:22.737686 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:03:22.737930 kubelet[2460]: E1101 01:03:22.737900 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 01:03:22.738218 kubelet[2460]: E1101 01:03:22.738160 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-qrqpb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-88f7866b5-794bz_calico-apiserver(56dcd17c-f13d-4889-8b88-69d06e438fd0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 01:03:22.739968 kubelet[2460]: E1101 01:03:22.739933 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:03:22.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.4.8:22-10.200.16.10:51588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:22.990612 systemd[1]: Started sshd@8-10.200.4.8:22-10.200.16.10:51588.service. Nov 1 01:03:22.995667 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 01:03:22.995747 kernel: audit: type=1130 audit(1761959002.989:1345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.4.8:22-10.200.16.10:51588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:23.483538 kubelet[2460]: E1101 01:03:23.483494 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:03:23.582000 audit[5287]: USER_ACCT pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:23.585203 sshd[5287]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:23.602382 kernel: audit: type=1101 audit(1761959003.582:1346): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:23.602444 sshd[5287]: Accepted publickey for core from 10.200.16.10 port 51588 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:23.608474 systemd[1]: Started session-11.scope. Nov 1 01:03:23.609986 systemd-logind[1416]: New session 11 of user core. Nov 1 01:03:23.630756 kernel: audit: type=1103 audit(1761959003.583:1347): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:23.583000 audit[5287]: CRED_ACQ pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:23.664081 kernel: audit: type=1006 audit(1761959003.583:1348): pid=5287 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Nov 1 01:03:23.664243 kernel: audit: type=1300 audit(1761959003.583:1348): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec392c160 a2=3 a3=0 items=0 ppid=1 pid=5287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:23.583000 audit[5287]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec392c160 a2=3 a3=0 items=0 ppid=1 pid=5287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:23.583000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:23.690984 kernel: audit: type=1327 audit(1761959003.583:1348): proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:23.691139 kernel: audit: type=1105 audit(1761959003.630:1349): pid=5287 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:23.630000 audit[5287]: USER_START pid=5287 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:23.632000 audit[5289]: CRED_ACQ pid=5289 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:23.709365 kernel: audit: type=1103 audit(1761959003.632:1350): pid=5289 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:24.160085 sshd[5287]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:24.160000 audit[5287]: USER_END pid=5287 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:24.183283 systemd[1]: sshd@8-10.200.4.8:22-10.200.16.10:51588.service: Deactivated successfully. Nov 1 01:03:24.185177 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 01:03:24.186388 systemd-logind[1416]: Session 11 logged out. Waiting for processes to exit. Nov 1 01:03:24.187644 systemd-logind[1416]: Removed session 11. Nov 1 01:03:24.190346 kernel: audit: type=1106 audit(1761959004.160:1351): pid=5287 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:24.180000 audit[5287]: CRED_DISP pid=5287 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:24.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.4.8:22-10.200.16.10:51588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:24.210358 kernel: audit: type=1104 audit(1761959004.180:1352): pid=5287 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:24.781000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:24.781000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001852f80 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:03:24.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:03:24.781000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:24.781000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002699f50 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:03:24.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:03:25.382000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:25.382000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c005ca1560 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:03:25.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:03:25.429000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:25.429000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c0049997a0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:03:25.429000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:03:25.455000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7416 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:25.455000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00666fbc0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:03:25.455000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:03:25.456000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7410 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:25.456000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00666fbf0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:03:25.456000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:03:25.456000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:25.456000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00666fc20 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:03:25.456000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:03:25.457000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:25.457000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c005812000 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:03:25.457000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:03:25.480574 kubelet[2460]: E1101 01:03:25.480535 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:03:29.260174 systemd[1]: Started sshd@9-10.200.4.8:22-10.200.16.10:51600.service. Nov 1 01:03:29.282917 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 01:03:29.283039 kernel: audit: type=1130 audit(1761959009.259:1362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.4.8:22-10.200.16.10:51600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:29.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.4.8:22-10.200.16.10:51600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:29.850000 audit[5300]: USER_ACCT pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:29.852614 sshd[5300]: Accepted publickey for core from 10.200.16.10 port 51600 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:29.871059 sshd[5300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:29.871401 kernel: audit: type=1101 audit(1761959009.850:1363): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:29.869000 audit[5300]: CRED_ACQ pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:29.879876 systemd[1]: Started session-12.scope. Nov 1 01:03:29.893416 kernel: audit: type=1103 audit(1761959009.869:1364): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:29.893599 systemd-logind[1416]: New session 12 of user core. Nov 1 01:03:29.869000 audit[5300]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1e1c2e60 a2=3 a3=0 items=0 ppid=1 pid=5300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:29.924250 kernel: audit: type=1006 audit(1761959009.869:1365): pid=5300 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Nov 1 01:03:29.924399 kernel: audit: type=1300 audit(1761959009.869:1365): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1e1c2e60 a2=3 a3=0 items=0 ppid=1 pid=5300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:29.869000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:29.932364 kernel: audit: type=1327 audit(1761959009.869:1365): proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:29.934000 audit[5300]: USER_START pid=5300 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:29.940000 audit[5304]: CRED_ACQ pid=5304 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:29.971432 kernel: audit: type=1105 audit(1761959009.934:1366): pid=5300 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:29.971545 kernel: audit: type=1103 audit(1761959009.940:1367): pid=5304 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:30.450753 sshd[5300]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:30.451000 audit[5300]: USER_END pid=5300 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:30.454420 systemd[1]: sshd@9-10.200.4.8:22-10.200.16.10:51600.service: Deactivated successfully. Nov 1 01:03:30.455228 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 01:03:30.459515 systemd-logind[1416]: Session 12 logged out. Waiting for processes to exit. Nov 1 01:03:30.460450 systemd-logind[1416]: Removed session 12. Nov 1 01:03:30.451000 audit[5300]: CRED_DISP pid=5300 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:30.480661 kubelet[2460]: E1101 01:03:30.480615 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:03:30.486798 kernel: audit: type=1106 audit(1761959010.451:1368): pid=5300 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:30.486906 kernel: audit: type=1104 audit(1761959010.451:1369): pid=5300 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:30.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.4.8:22-10.200.16.10:51600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:30.551616 systemd[1]: Started sshd@10-10.200.4.8:22-10.200.16.10:56290.service. Nov 1 01:03:30.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.4.8:22-10.200.16.10:56290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:31.144000 audit[5315]: USER_ACCT pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:31.146194 sshd[5315]: Accepted publickey for core from 10.200.16.10 port 56290 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:31.145000 audit[5315]: CRED_ACQ pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:31.145000 audit[5315]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddf72ae20 a2=3 a3=0 items=0 ppid=1 pid=5315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:31.145000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:31.147650 sshd[5315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:31.152433 systemd[1]: Started session-13.scope. Nov 1 01:03:31.152945 systemd-logind[1416]: New session 13 of user core. Nov 1 01:03:31.156000 audit[5315]: USER_START pid=5315 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:31.159000 audit[5317]: CRED_ACQ pid=5317 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:31.729919 sshd[5315]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:31.730000 audit[5315]: USER_END pid=5315 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:31.731000 audit[5315]: CRED_DISP pid=5315 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:31.733623 systemd-logind[1416]: Session 13 logged out. Waiting for processes to exit. Nov 1 01:03:31.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.4.8:22-10.200.16.10:56290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:31.735285 systemd[1]: sshd@10-10.200.4.8:22-10.200.16.10:56290.service: Deactivated successfully. Nov 1 01:03:31.736298 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 01:03:31.738405 systemd-logind[1416]: Removed session 13. Nov 1 01:03:31.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.4.8:22-10.200.16.10:56296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:31.834971 systemd[1]: Started sshd@11-10.200.4.8:22-10.200.16.10:56296.service. Nov 1 01:03:32.436000 audit[5325]: USER_ACCT pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:32.437425 sshd[5325]: Accepted publickey for core from 10.200.16.10 port 56296 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:32.438000 audit[5325]: CRED_ACQ pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:32.438000 audit[5325]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb0844c40 a2=3 a3=0 items=0 ppid=1 pid=5325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:32.438000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:32.439124 sshd[5325]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:32.444852 systemd[1]: Started session-14.scope. Nov 1 01:03:32.446646 systemd-logind[1416]: New session 14 of user core. Nov 1 01:03:32.452000 audit[5325]: USER_START pid=5325 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:32.454000 audit[5327]: CRED_ACQ pid=5327 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:32.470000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:32.470000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00164f100 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:03:32.470000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:32.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:03:32.470000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001722320 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:03:32.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:03:32.471000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:32.471000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001722340 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:03:32.471000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:03:32.470000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:03:32.470000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00164f0e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:03:32.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:03:32.477961 kubelet[2460]: E1101 01:03:32.477920 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:03:32.921031 sshd[5325]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:32.922000 audit[5325]: USER_END pid=5325 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:32.922000 audit[5325]: CRED_DISP pid=5325 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:32.923916 systemd[1]: sshd@11-10.200.4.8:22-10.200.16.10:56296.service: Deactivated successfully. Nov 1 01:03:32.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.4.8:22-10.200.16.10:56296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:32.925303 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 01:03:32.925350 systemd-logind[1416]: Session 14 logged out. Waiting for processes to exit. Nov 1 01:03:32.926414 systemd-logind[1416]: Removed session 14. Nov 1 01:03:34.478768 kubelet[2460]: E1101 01:03:34.478710 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:03:35.478156 kubelet[2460]: E1101 01:03:35.478109 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:03:37.481710 kubelet[2460]: E1101 01:03:37.481653 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:03:38.027243 systemd[1]: Started sshd@12-10.200.4.8:22-10.200.16.10:56302.service. Nov 1 01:03:38.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.4.8:22-10.200.16.10:56302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:38.052210 kernel: kauditd_printk_skb: 35 callbacks suppressed Nov 1 01:03:38.052423 kernel: audit: type=1130 audit(1761959018.027:1393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.4.8:22-10.200.16.10:56302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:38.478427 kubelet[2460]: E1101 01:03:38.478356 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:03:38.650000 audit[5340]: USER_ACCT pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:38.651755 sshd[5340]: Accepted publickey for core from 10.200.16.10 port 56302 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:38.669365 kernel: audit: type=1101 audit(1761959018.650:1394): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:38.669959 sshd[5340]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:38.676519 systemd[1]: Started session-15.scope. Nov 1 01:03:38.678067 systemd-logind[1416]: New session 15 of user core. Nov 1 01:03:38.668000 audit[5340]: CRED_ACQ pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:38.698372 kernel: audit: type=1103 audit(1761959018.668:1395): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:38.668000 audit[5340]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc1df5ff0 a2=3 a3=0 items=0 ppid=1 pid=5340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:38.731461 kernel: audit: type=1006 audit(1761959018.668:1396): pid=5340 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 01:03:38.731639 kernel: audit: type=1300 audit(1761959018.668:1396): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc1df5ff0 a2=3 a3=0 items=0 ppid=1 pid=5340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:38.668000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:38.691000 audit[5340]: USER_START pid=5340 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:38.758488 kernel: audit: type=1327 audit(1761959018.668:1396): proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:38.758647 kernel: audit: type=1105 audit(1761959018.691:1397): pid=5340 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:38.699000 audit[5342]: CRED_ACQ pid=5342 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:38.776123 kernel: audit: type=1103 audit(1761959018.699:1398): pid=5342 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:39.173748 sshd[5340]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:39.175000 audit[5340]: USER_END pid=5340 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:39.177363 systemd[1]: sshd@12-10.200.4.8:22-10.200.16.10:56302.service: Deactivated successfully. Nov 1 01:03:39.178737 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 01:03:39.179544 systemd-logind[1416]: Session 15 logged out. Waiting for processes to exit. Nov 1 01:03:39.180356 systemd-logind[1416]: Removed session 15. Nov 1 01:03:39.175000 audit[5340]: CRED_DISP pid=5340 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:39.211379 kernel: audit: type=1106 audit(1761959019.175:1399): pid=5340 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:39.211559 kernel: audit: type=1104 audit(1761959019.175:1400): pid=5340 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:39.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.4.8:22-10.200.16.10:56302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:44.297559 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 01:03:44.297696 kernel: audit: type=1130 audit(1761959024.280:1402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.4.8:22-10.200.16.10:60024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:44.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.4.8:22-10.200.16.10:60024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:44.280650 systemd[1]: Started sshd@13-10.200.4.8:22-10.200.16.10:60024.service. Nov 1 01:03:44.479029 kubelet[2460]: E1101 01:03:44.478957 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:03:44.479551 kubelet[2460]: E1101 01:03:44.479431 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:03:44.881000 audit[5378]: USER_ACCT pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:44.882318 sshd[5378]: Accepted publickey for core from 10.200.16.10 port 60024 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:44.907410 kernel: audit: type=1101 audit(1761959024.881:1403): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:44.907761 sshd[5378]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:44.915260 systemd[1]: Started session-16.scope. Nov 1 01:03:44.917154 systemd-logind[1416]: New session 16 of user core. Nov 1 01:03:44.906000 audit[5378]: CRED_ACQ pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:44.944397 kernel: audit: type=1103 audit(1761959024.906:1404): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:44.958384 kernel: audit: type=1006 audit(1761959024.906:1405): pid=5378 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 01:03:44.958486 kernel: audit: type=1300 audit(1761959024.906:1405): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc7637ae0 a2=3 a3=0 items=0 ppid=1 pid=5378 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:44.906000 audit[5378]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc7637ae0 a2=3 a3=0 items=0 ppid=1 pid=5378 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:44.906000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:44.981456 kernel: audit: type=1327 audit(1761959024.906:1405): proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:44.922000 audit[5378]: USER_START pid=5378 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:44.944000 audit[5380]: CRED_ACQ pid=5380 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:45.022731 kernel: audit: type=1105 audit(1761959024.922:1406): pid=5378 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:45.022918 kernel: audit: type=1103 audit(1761959024.944:1407): pid=5380 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:45.477233 sshd[5378]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:45.478000 audit[5378]: USER_END pid=5378 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:45.480515 systemd-logind[1416]: Session 16 logged out. Waiting for processes to exit. Nov 1 01:03:45.481843 systemd[1]: sshd@13-10.200.4.8:22-10.200.16.10:60024.service: Deactivated successfully. Nov 1 01:03:45.482579 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 01:03:45.484072 systemd-logind[1416]: Removed session 16. Nov 1 01:03:45.478000 audit[5378]: CRED_DISP pid=5378 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:45.516016 kernel: audit: type=1106 audit(1761959025.478:1408): pid=5378 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:45.516146 kernel: audit: type=1104 audit(1761959025.478:1409): pid=5378 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:45.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.4.8:22-10.200.16.10:60024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:47.481356 kubelet[2460]: E1101 01:03:47.481302 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:03:49.483574 kubelet[2460]: E1101 01:03:49.483521 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:03:50.574967 systemd[1]: Started sshd@14-10.200.4.8:22-10.200.16.10:46056.service. Nov 1 01:03:50.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.4.8:22-10.200.16.10:46056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:50.580136 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 01:03:50.580217 kernel: audit: type=1130 audit(1761959030.574:1411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.4.8:22-10.200.16.10:46056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:51.166000 audit[5391]: USER_ACCT pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.168052 sshd[5391]: Accepted publickey for core from 10.200.16.10 port 46056 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:51.184000 audit[5391]: CRED_ACQ pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.186622 sshd[5391]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:51.204463 kernel: audit: type=1101 audit(1761959031.166:1412): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.204589 kernel: audit: type=1103 audit(1761959031.184:1413): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.209373 systemd[1]: Started session-17.scope. Nov 1 01:03:51.210716 systemd-logind[1416]: New session 17 of user core. Nov 1 01:03:51.226394 kernel: audit: type=1006 audit(1761959031.184:1414): pid=5391 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Nov 1 01:03:51.228454 kernel: audit: type=1300 audit(1761959031.184:1414): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc76d10140 a2=3 a3=0 items=0 ppid=1 pid=5391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:51.184000 audit[5391]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc76d10140 a2=3 a3=0 items=0 ppid=1 pid=5391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:51.184000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:51.222000 audit[5391]: USER_START pid=5391 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.274953 kernel: audit: type=1327 audit(1761959031.184:1414): proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:51.275074 kernel: audit: type=1105 audit(1761959031.222:1415): pid=5391 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.240000 audit[5396]: CRED_ACQ pid=5396 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.292363 kernel: audit: type=1103 audit(1761959031.240:1416): pid=5396 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.491203 kubelet[2460]: E1101 01:03:51.491147 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:03:51.737349 sshd[5391]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:51.737000 audit[5391]: USER_END pid=5391 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.740208 systemd[1]: sshd@14-10.200.4.8:22-10.200.16.10:46056.service: Deactivated successfully. Nov 1 01:03:51.742031 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 01:03:51.743185 systemd-logind[1416]: Session 17 logged out. Waiting for processes to exit. Nov 1 01:03:51.744076 systemd-logind[1416]: Removed session 17. Nov 1 01:03:51.758351 kernel: audit: type=1106 audit(1761959031.737:1417): pid=5391 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.737000 audit[5391]: CRED_DISP pid=5391 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:51.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.4.8:22-10.200.16.10:46056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:51.783492 kernel: audit: type=1104 audit(1761959031.737:1418): pid=5391 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:52.479032 kubelet[2460]: E1101 01:03:52.478984 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:03:55.479667 kubelet[2460]: E1101 01:03:55.479628 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:03:56.477817 kubelet[2460]: E1101 01:03:56.477782 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:03:56.837577 systemd[1]: Started sshd@15-10.200.4.8:22-10.200.16.10:46064.service. Nov 1 01:03:56.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.4.8:22-10.200.16.10:46064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:56.843225 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 01:03:56.843292 kernel: audit: type=1130 audit(1761959036.836:1420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.4.8:22-10.200.16.10:46064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:57.427000 audit[5407]: USER_ACCT pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.447657 sshd[5407]: Accepted publickey for core from 10.200.16.10 port 46064 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:57.448355 kernel: audit: type=1101 audit(1761959037.427:1421): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.450389 sshd[5407]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:57.457690 systemd[1]: Started session-18.scope. Nov 1 01:03:57.459601 systemd-logind[1416]: New session 18 of user core. Nov 1 01:03:57.447000 audit[5407]: CRED_ACQ pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.484366 kernel: audit: type=1103 audit(1761959037.447:1422): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.498357 kernel: audit: type=1006 audit(1761959037.447:1423): pid=5407 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Nov 1 01:03:57.447000 audit[5407]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcf5ae200 a2=3 a3=0 items=0 ppid=1 pid=5407 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:57.447000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:57.523541 kernel: audit: type=1300 audit(1761959037.447:1423): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcf5ae200 a2=3 a3=0 items=0 ppid=1 pid=5407 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:57.523642 kernel: audit: type=1327 audit(1761959037.447:1423): proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:57.523671 kernel: audit: type=1105 audit(1761959037.463:1424): pid=5407 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.463000 audit[5407]: USER_START pid=5407 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.484000 audit[5409]: CRED_ACQ pid=5409 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.567369 kernel: audit: type=1103 audit(1761959037.484:1425): pid=5409 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.983594 sshd[5407]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:57.983000 audit[5407]: USER_END pid=5407 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.986226 systemd[1]: sshd@15-10.200.4.8:22-10.200.16.10:46064.service: Deactivated successfully. Nov 1 01:03:57.988212 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 01:03:57.989142 systemd-logind[1416]: Session 18 logged out. Waiting for processes to exit. Nov 1 01:03:57.990117 systemd-logind[1416]: Removed session 18. Nov 1 01:03:58.005348 kernel: audit: type=1106 audit(1761959037.983:1426): pid=5407 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.983000 audit[5407]: CRED_DISP pid=5407 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:57.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.4.8:22-10.200.16.10:46064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:58.023360 kernel: audit: type=1104 audit(1761959037.983:1427): pid=5407 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:58.084163 systemd[1]: Started sshd@16-10.200.4.8:22-10.200.16.10:46080.service. Nov 1 01:03:58.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.4.8:22-10.200.16.10:46080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:58.478870 kubelet[2460]: E1101 01:03:58.478823 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:03:58.678000 audit[5419]: USER_ACCT pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:58.680000 audit[5419]: CRED_ACQ pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:58.680000 audit[5419]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff35b1d740 a2=3 a3=0 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:58.680000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:58.682852 sshd[5419]: Accepted publickey for core from 10.200.16.10 port 46080 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:58.681960 sshd[5419]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:58.688660 systemd[1]: Started session-19.scope. Nov 1 01:03:58.690487 systemd-logind[1416]: New session 19 of user core. Nov 1 01:03:58.695000 audit[5419]: USER_START pid=5419 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:58.697000 audit[5421]: CRED_ACQ pid=5421 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:59.249032 sshd[5419]: pam_unix(sshd:session): session closed for user core Nov 1 01:03:59.249000 audit[5419]: USER_END pid=5419 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:59.249000 audit[5419]: CRED_DISP pid=5419 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:59.253025 systemd-logind[1416]: Session 19 logged out. Waiting for processes to exit. Nov 1 01:03:59.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.4.8:22-10.200.16.10:46080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:59.254099 systemd[1]: sshd@16-10.200.4.8:22-10.200.16.10:46080.service: Deactivated successfully. Nov 1 01:03:59.255125 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 01:03:59.256904 systemd-logind[1416]: Removed session 19. Nov 1 01:03:59.348632 systemd[1]: Started sshd@17-10.200.4.8:22-10.200.16.10:46082.service. Nov 1 01:03:59.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.4.8:22-10.200.16.10:46082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:03:59.941000 audit[5430]: USER_ACCT pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:59.942859 sshd[5430]: Accepted publickey for core from 10.200.16.10 port 46082 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:03:59.942000 audit[5430]: CRED_ACQ pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:59.942000 audit[5430]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2c6f1850 a2=3 a3=0 items=0 ppid=1 pid=5430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:03:59.942000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:03:59.944442 sshd[5430]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:03:59.949447 systemd-logind[1416]: New session 20 of user core. Nov 1 01:03:59.949803 systemd[1]: Started session-20.scope. Nov 1 01:03:59.953000 audit[5430]: USER_START pid=5430 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:03:59.955000 audit[5432]: CRED_ACQ pid=5432 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.070000 audit[5442]: NETFILTER_CFG table=filter:133 family=2 entries=26 op=nft_register_rule pid=5442 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:04:01.070000 audit[5442]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7fffef3fc9c0 a2=0 a3=7fffef3fc9ac items=0 ppid=2565 pid=5442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:01.070000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:04:01.075000 audit[5442]: NETFILTER_CFG table=nat:134 family=2 entries=20 op=nft_register_rule pid=5442 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:04:01.075000 audit[5442]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffef3fc9c0 a2=0 a3=0 items=0 ppid=2565 pid=5442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:01.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:04:01.089000 audit[5444]: NETFILTER_CFG table=filter:135 family=2 entries=38 op=nft_register_rule pid=5444 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:04:01.089000 audit[5444]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffccfbb10f0 a2=0 a3=7ffccfbb10dc items=0 ppid=2565 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:01.089000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:04:01.093000 audit[5444]: NETFILTER_CFG table=nat:136 family=2 entries=20 op=nft_register_rule pid=5444 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:04:01.093000 audit[5444]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffccfbb10f0 a2=0 a3=0 items=0 ppid=2565 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:01.093000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:04:01.170243 sshd[5430]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:01.171000 audit[5430]: USER_END pid=5430 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.171000 audit[5430]: CRED_DISP pid=5430 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.174968 systemd[1]: sshd@17-10.200.4.8:22-10.200.16.10:46082.service: Deactivated successfully. Nov 1 01:04:01.176029 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 01:04:01.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.4.8:22-10.200.16.10:46082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:01.176663 systemd-logind[1416]: Session 20 logged out. Waiting for processes to exit. Nov 1 01:04:01.178103 systemd-logind[1416]: Removed session 20. Nov 1 01:04:01.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.4.8:22-10.200.16.10:50872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:01.275909 systemd[1]: Started sshd@18-10.200.4.8:22-10.200.16.10:50872.service. Nov 1 01:04:01.895203 kernel: kauditd_printk_skb: 36 callbacks suppressed Nov 1 01:04:01.895299 kernel: audit: type=1101 audit(1761959041.889:1452): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.889000 audit[5447]: USER_ACCT pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.892277 sshd[5447]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:04:01.895686 sshd[5447]: Accepted publickey for core from 10.200.16.10 port 50872 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:04:01.906427 systemd[1]: Started session-21.scope. Nov 1 01:04:01.907614 systemd-logind[1416]: New session 21 of user core. Nov 1 01:04:01.890000 audit[5447]: CRED_ACQ pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.943976 kernel: audit: type=1103 audit(1761959041.890:1453): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.944143 kernel: audit: type=1006 audit(1761959041.890:1454): pid=5447 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Nov 1 01:04:01.890000 audit[5447]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8788cf40 a2=3 a3=0 items=0 ppid=1 pid=5447 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:01.960798 kernel: audit: type=1300 audit(1761959041.890:1454): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8788cf40 a2=3 a3=0 items=0 ppid=1 pid=5447 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:01.890000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:01.989742 kernel: audit: type=1327 audit(1761959041.890:1454): proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:01.989896 kernel: audit: type=1105 audit(1761959041.914:1455): pid=5447 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.914000 audit[5447]: USER_START pid=5447 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:01.918000 audit[5449]: CRED_ACQ pid=5449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:02.008350 kernel: audit: type=1103 audit(1761959041.918:1456): pid=5449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:02.623573 sshd[5447]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:02.623000 audit[5447]: USER_END pid=5447 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:02.626184 systemd[1]: sshd@18-10.200.4.8:22-10.200.16.10:50872.service: Deactivated successfully. Nov 1 01:04:02.627579 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 01:04:02.628364 systemd-logind[1416]: Session 21 logged out. Waiting for processes to exit. Nov 1 01:04:02.629176 systemd-logind[1416]: Removed session 21. Nov 1 01:04:02.623000 audit[5447]: CRED_DISP pid=5447 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:02.661191 kernel: audit: type=1106 audit(1761959042.623:1457): pid=5447 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:02.661368 kernel: audit: type=1104 audit(1761959042.623:1458): pid=5447 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:02.661435 kernel: audit: type=1131 audit(1761959042.623:1459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.4.8:22-10.200.16.10:50872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:02.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.4.8:22-10.200.16.10:50872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:02.724047 systemd[1]: Started sshd@19-10.200.4.8:22-10.200.16.10:50878.service. Nov 1 01:04:02.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.4.8:22-10.200.16.10:50878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:03.315000 audit[5457]: USER_ACCT pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:03.317540 sshd[5457]: Accepted publickey for core from 10.200.16.10 port 50878 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:04:03.317000 audit[5457]: CRED_ACQ pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:03.317000 audit[5457]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5256b4b0 a2=3 a3=0 items=0 ppid=1 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:03.317000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:03.320150 sshd[5457]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:04:03.325199 systemd[1]: Started session-22.scope. Nov 1 01:04:03.325720 systemd-logind[1416]: New session 22 of user core. Nov 1 01:04:03.328000 audit[5457]: USER_START pid=5457 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:03.330000 audit[5459]: CRED_ACQ pid=5459 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:03.481059 kubelet[2460]: E1101 01:04:03.481009 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:04:03.834868 sshd[5457]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:03.835000 audit[5457]: USER_END pid=5457 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:03.835000 audit[5457]: CRED_DISP pid=5457 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:03.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.4.8:22-10.200.16.10:50878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:03.838534 systemd[1]: sshd@19-10.200.4.8:22-10.200.16.10:50878.service: Deactivated successfully. Nov 1 01:04:03.840790 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 01:04:03.841897 systemd-logind[1416]: Session 22 logged out. Waiting for processes to exit. Nov 1 01:04:03.842865 systemd-logind[1416]: Removed session 22. Nov 1 01:04:04.478147 kubelet[2460]: E1101 01:04:04.478085 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:04:06.477960 kubelet[2460]: E1101 01:04:06.477920 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:04:08.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.4.8:22-10.200.16.10:50890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:08.942625 systemd[1]: Started sshd@20-10.200.4.8:22-10.200.16.10:50890.service. Nov 1 01:04:08.947140 kernel: kauditd_printk_skb: 11 callbacks suppressed Nov 1 01:04:08.947234 kernel: audit: type=1130 audit(1761959048.941:1469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.4.8:22-10.200.16.10:50890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:09.479224 kubelet[2460]: E1101 01:04:09.479182 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:04:09.479863 kubelet[2460]: E1101 01:04:09.479517 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:04:09.538000 audit[5474]: USER_ACCT pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:09.557759 sshd[5474]: Accepted publickey for core from 10.200.16.10 port 50890 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:04:09.559195 kernel: audit: type=1101 audit(1761959049.538:1470): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:09.558160 sshd[5474]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:04:09.556000 audit[5474]: CRED_ACQ pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:09.574520 systemd-logind[1416]: New session 23 of user core. Nov 1 01:04:09.575503 systemd[1]: Started session-23.scope. Nov 1 01:04:09.578642 kernel: audit: type=1103 audit(1761959049.556:1471): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:09.593143 kernel: audit: type=1006 audit(1761959049.556:1472): pid=5474 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 01:04:09.593255 kernel: audit: type=1300 audit(1761959049.556:1472): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5a235b70 a2=3 a3=0 items=0 ppid=1 pid=5474 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:09.556000 audit[5474]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5a235b70 a2=3 a3=0 items=0 ppid=1 pid=5474 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:09.556000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:09.618448 kernel: audit: type=1327 audit(1761959049.556:1472): proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:09.618591 kernel: audit: type=1105 audit(1761959049.585:1473): pid=5474 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:09.585000 audit[5474]: USER_START pid=5474 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:09.597000 audit[5476]: CRED_ACQ pid=5476 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:09.651057 kernel: audit: type=1103 audit(1761959049.597:1474): pid=5476 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:10.081174 sshd[5474]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:10.081000 audit[5474]: USER_END pid=5474 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:10.105367 kernel: audit: type=1106 audit(1761959050.081:1475): pid=5474 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:10.106287 systemd-logind[1416]: Session 23 logged out. Waiting for processes to exit. Nov 1 01:04:10.106776 systemd[1]: sshd@20-10.200.4.8:22-10.200.16.10:50890.service: Deactivated successfully. Nov 1 01:04:10.107783 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 01:04:10.081000 audit[5474]: CRED_DISP pid=5474 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:10.130369 kernel: audit: type=1104 audit(1761959050.081:1476): pid=5474 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:10.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.4.8:22-10.200.16.10:50890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:10.131391 systemd-logind[1416]: Removed session 23. Nov 1 01:04:10.291000 audit[5486]: NETFILTER_CFG table=filter:137 family=2 entries=26 op=nft_register_rule pid=5486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:04:10.291000 audit[5486]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcc3792aa0 a2=0 a3=7ffcc3792a8c items=0 ppid=2565 pid=5486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:10.291000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:04:10.297000 audit[5486]: NETFILTER_CFG table=nat:138 family=2 entries=104 op=nft_register_chain pid=5486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 01:04:10.297000 audit[5486]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffcc3792aa0 a2=0 a3=7ffcc3792a8c items=0 ppid=2565 pid=5486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:10.297000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 01:04:10.478738 kubelet[2460]: E1101 01:04:10.478342 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:04:10.741957 systemd[1]: run-containerd-runc-k8s.io-c5d9d4a6dcf8a11d3b5fb62395437ee82891fe383baaf0178d8b3e43ee8f8d36-runc.XLGdXp.mount: Deactivated successfully. Nov 1 01:04:15.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.4.8:22-10.200.16.10:42526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:15.183156 systemd[1]: Started sshd@21-10.200.4.8:22-10.200.16.10:42526.service. Nov 1 01:04:15.188382 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 01:04:15.189092 kernel: audit: type=1130 audit(1761959055.182:1480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.4.8:22-10.200.16.10:42526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:15.781000 audit[5509]: USER_ACCT pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:15.783765 sshd[5509]: Accepted publickey for core from 10.200.16.10 port 42526 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:04:15.799000 audit[5509]: CRED_ACQ pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:15.800963 sshd[5509]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:04:15.806822 systemd[1]: Started session-24.scope. Nov 1 01:04:15.807145 systemd-logind[1416]: New session 24 of user core. Nov 1 01:04:15.818192 kernel: audit: type=1101 audit(1761959055.781:1481): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:15.818273 kernel: audit: type=1103 audit(1761959055.799:1482): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:15.799000 audit[5509]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde1447e00 a2=3 a3=0 items=0 ppid=1 pid=5509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:15.830353 kernel: audit: type=1006 audit(1761959055.799:1483): pid=5509 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Nov 1 01:04:15.830402 kernel: audit: type=1300 audit(1761959055.799:1483): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde1447e00 a2=3 a3=0 items=0 ppid=1 pid=5509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:15.799000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:15.846409 kernel: audit: type=1327 audit(1761959055.799:1483): proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:15.812000 audit[5509]: USER_START pid=5509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:15.877302 kernel: audit: type=1105 audit(1761959055.812:1484): pid=5509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:15.815000 audit[5511]: CRED_ACQ pid=5511 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:15.878355 kernel: audit: type=1103 audit(1761959055.815:1485): pid=5511 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:16.285184 sshd[5509]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:16.285000 audit[5509]: USER_END pid=5509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:16.308779 kernel: audit: type=1106 audit(1761959056.285:1486): pid=5509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:16.308879 kernel: audit: type=1104 audit(1761959056.285:1487): pid=5509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:16.285000 audit[5509]: CRED_DISP pid=5509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:16.305402 systemd[1]: sshd@21-10.200.4.8:22-10.200.16.10:42526.service: Deactivated successfully. Nov 1 01:04:16.306213 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 01:04:16.308439 systemd-logind[1416]: Session 24 logged out. Waiting for processes to exit. Nov 1 01:04:16.309802 systemd-logind[1416]: Removed session 24. Nov 1 01:04:16.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.4.8:22-10.200.16.10:42526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:17.478372 kubelet[2460]: E1101 01:04:17.478298 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:04:19.481867 kubelet[2460]: E1101 01:04:19.481811 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:04:19.482819 kubelet[2460]: E1101 01:04:19.482772 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:04:21.407776 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 01:04:21.407922 kernel: audit: type=1130 audit(1761959061.384:1489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.4.8:22-10.200.16.10:40712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:21.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.4.8:22-10.200.16.10:40712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:21.384358 systemd[1]: Started sshd@22-10.200.4.8:22-10.200.16.10:40712.service. Nov 1 01:04:21.984180 sshd[5521]: Accepted publickey for core from 10.200.16.10 port 40712 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:04:21.983000 audit[5521]: USER_ACCT pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.005362 kernel: audit: type=1101 audit(1761959061.983:1490): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.005753 sshd[5521]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:04:22.019165 systemd[1]: Started session-25.scope. Nov 1 01:04:22.004000 audit[5521]: CRED_ACQ pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.020986 systemd-logind[1416]: New session 25 of user core. Nov 1 01:04:22.042351 kernel: audit: type=1103 audit(1761959062.004:1491): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.067357 kernel: audit: type=1006 audit(1761959062.004:1492): pid=5521 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 01:04:22.004000 audit[5521]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0be909c0 a2=3 a3=0 items=0 ppid=1 pid=5521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:22.088585 kernel: audit: type=1300 audit(1761959062.004:1492): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0be909c0 a2=3 a3=0 items=0 ppid=1 pid=5521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:22.004000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:22.123526 kernel: audit: type=1327 audit(1761959062.004:1492): proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:22.123676 kernel: audit: type=1105 audit(1761959062.029:1493): pid=5521 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.029000 audit[5521]: USER_START pid=5521 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.031000 audit[5523]: CRED_ACQ pid=5523 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.141367 kernel: audit: type=1103 audit(1761959062.031:1494): pid=5523 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.477813 kubelet[2460]: E1101 01:04:22.477469 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:04:22.514953 sshd[5521]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:22.515000 audit[5521]: USER_END pid=5521 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.517598 systemd[1]: sshd@22-10.200.4.8:22-10.200.16.10:40712.service: Deactivated successfully. Nov 1 01:04:22.518939 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 01:04:22.519698 systemd-logind[1416]: Session 25 logged out. Waiting for processes to exit. Nov 1 01:04:22.520511 systemd-logind[1416]: Removed session 25. Nov 1 01:04:22.515000 audit[5521]: CRED_DISP pid=5521 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.550259 kernel: audit: type=1106 audit(1761959062.515:1495): pid=5521 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.550405 kernel: audit: type=1104 audit(1761959062.515:1496): pid=5521 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:22.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.4.8:22-10.200.16.10:40712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:23.480926 kubelet[2460]: E1101 01:04:23.480876 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:04:23.481480 kubelet[2460]: E1101 01:04:23.481304 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:04:24.783000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:24.783000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:24.783000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00195d100 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:04:24.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:04:24.783000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e2a240 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:04:24.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:04:25.384000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:25.384000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0151813b0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:04:25.384000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:04:25.431000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:25.431000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c006c7a460 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:04:25.431000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:04:25.457000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7416 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:25.457000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0151814a0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:04:25.457000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:04:25.458000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7414 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:25.458000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0151814d0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:04:25.458000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:04:25.458000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:25.458000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00ffc2fa0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:04:25.458000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:04:25.459000 audit[2337]: AVC avc: denied { watch } for pid=2337 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7410 scontext=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:25.459000 audit[2337]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0151815f0 a2=fc6 a3=0 items=0 ppid=2181 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c724,c753 key=(null) Nov 1 01:04:25.459000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E342E38002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Nov 1 01:04:27.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.4.8:22-10.200.16.10:40726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:27.617131 systemd[1]: Started sshd@23-10.200.4.8:22-10.200.16.10:40726.service. Nov 1 01:04:27.622492 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 01:04:27.622564 kernel: audit: type=1130 audit(1761959067.617:1506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.4.8:22-10.200.16.10:40726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:28.222220 sshd[5539]: Accepted publickey for core from 10.200.16.10 port 40726 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:04:28.224084 sshd[5539]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:04:28.221000 audit[5539]: USER_ACCT pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.239665 systemd-logind[1416]: New session 26 of user core. Nov 1 01:04:28.240439 systemd[1]: Started session-26.scope. Nov 1 01:04:28.223000 audit[5539]: CRED_ACQ pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.260376 kernel: audit: type=1101 audit(1761959068.221:1507): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.260480 kernel: audit: type=1103 audit(1761959068.223:1508): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.223000 audit[5539]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff650b1040 a2=3 a3=0 items=0 ppid=1 pid=5539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:28.287532 kernel: audit: type=1006 audit(1761959068.223:1509): pid=5539 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 01:04:28.287640 kernel: audit: type=1300 audit(1761959068.223:1509): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff650b1040 a2=3 a3=0 items=0 ppid=1 pid=5539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:28.223000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:28.294512 kernel: audit: type=1327 audit(1761959068.223:1509): proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:28.246000 audit[5539]: USER_START pid=5539 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.316978 kernel: audit: type=1105 audit(1761959068.246:1510): pid=5539 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.260000 audit[5541]: CRED_ACQ pid=5541 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.334424 kernel: audit: type=1103 audit(1761959068.260:1511): pid=5541 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.719478 sshd[5539]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:28.720000 audit[5539]: USER_END pid=5539 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.722557 systemd[1]: sshd@23-10.200.4.8:22-10.200.16.10:40726.service: Deactivated successfully. Nov 1 01:04:28.723355 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 01:04:28.725242 systemd-logind[1416]: Session 26 logged out. Waiting for processes to exit. Nov 1 01:04:28.726147 systemd-logind[1416]: Removed session 26. Nov 1 01:04:28.720000 audit[5539]: CRED_DISP pid=5539 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.755586 kernel: audit: type=1106 audit(1761959068.720:1512): pid=5539 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.755713 kernel: audit: type=1104 audit(1761959068.720:1513): pid=5539 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:28.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.4.8:22-10.200.16.10:40726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:30.478720 env[1425]: time="2025-11-01T01:04:30.478475547Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 01:04:30.480384 kubelet[2460]: E1101 01:04:30.479234 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:04:30.774412 env[1425]: time="2025-11-01T01:04:30.774270277Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:04:30.778382 env[1425]: time="2025-11-01T01:04:30.778298747Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 01:04:30.778697 kubelet[2460]: E1101 01:04:30.778630 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:04:30.778820 kubelet[2460]: E1101 01:04:30.778712 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 01:04:30.778944 kubelet[2460]: E1101 01:04:30.778897 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 01:04:30.781263 env[1425]: time="2025-11-01T01:04:30.781228297Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 01:04:31.057359 env[1425]: time="2025-11-01T01:04:31.057075177Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:04:31.062349 env[1425]: time="2025-11-01T01:04:31.062190166Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 01:04:31.062744 kubelet[2460]: E1101 01:04:31.062686 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:04:31.062907 kubelet[2460]: E1101 01:04:31.062887 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 01:04:31.063262 kubelet[2460]: E1101 01:04:31.063199 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x268t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-hxt4l_calico-system(a3eea3d5-3f7d-4258-b436-9bce8adfc837): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 01:04:31.064910 kubelet[2460]: E1101 01:04:31.064856 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-hxt4l" podUID="a3eea3d5-3f7d-4258-b436-9bce8adfc837" Nov 1 01:04:31.480288 kubelet[2460]: E1101 01:04:31.480240 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5" Nov 1 01:04:32.471000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:32.471000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002f14860 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:04:32.471000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:04:32.472000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:32.472000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:32.472000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ee0aa0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:04:32.472000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:04:32.474000 audit[2276]: AVC avc: denied { watch } for pid=2276 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7408 scontext=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 01:04:32.474000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ee0ac0 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:04:32.474000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:04:32.472000 audit[2276]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002f14b80 a2=fc6 a3=0 items=0 ppid=2140 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c904,c992 key=(null) Nov 1 01:04:32.472000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 01:04:33.478407 kubelet[2460]: E1101 01:04:33.478352 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-794bz" podUID="56dcd17c-f13d-4889-8b88-69d06e438fd0" Nov 1 01:04:33.819733 systemd[1]: Started sshd@24-10.200.4.8:22-10.200.16.10:47306.service. Nov 1 01:04:33.848985 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 01:04:33.849114 kernel: audit: type=1130 audit(1761959073.825:1519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.4.8:22-10.200.16.10:47306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:33.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.4.8:22-10.200.16.10:47306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:34.435661 sshd[5555]: Accepted publickey for core from 10.200.16.10 port 47306 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:04:34.435000 audit[5555]: USER_ACCT pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:34.456366 kernel: audit: type=1101 audit(1761959074.435:1520): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:34.456778 sshd[5555]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:04:34.455000 audit[5555]: CRED_ACQ pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:34.464327 systemd-logind[1416]: New session 27 of user core. Nov 1 01:04:34.478888 kernel: audit: type=1103 audit(1761959074.455:1521): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:34.481388 kubelet[2460]: E1101 01:04:34.479955 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-88f7866b5-knct7" podUID="e6bbb0b8-1f6b-4971-8bbb-0c65a2fea3a3" Nov 1 01:04:34.481388 kubelet[2460]: E1101 01:04:34.480402 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-nk2dv" podUID="4e3f47c8-00e9-4d23-af1c-56111466a677" Nov 1 01:04:34.482898 systemd[1]: Started session-27.scope. Nov 1 01:04:34.492731 kernel: audit: type=1006 audit(1761959074.455:1522): pid=5555 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Nov 1 01:04:34.492818 kernel: audit: type=1300 audit(1761959074.455:1522): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4b2e9a00 a2=3 a3=0 items=0 ppid=1 pid=5555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:34.455000 audit[5555]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4b2e9a00 a2=3 a3=0 items=0 ppid=1 pid=5555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:34.455000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:34.515361 kernel: audit: type=1327 audit(1761959074.455:1522): proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:34.515458 kernel: audit: type=1105 audit(1761959074.507:1523): pid=5555 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:34.507000 audit[5555]: USER_START pid=5555 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:34.536373 kernel: audit: type=1103 audit(1761959074.509:1524): pid=5557 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:34.509000 audit[5557]: CRED_ACQ pid=5557 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:34.978130 sshd[5555]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:34.979000 audit[5555]: USER_END pid=5555 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:35.000041 systemd[1]: sshd@24-10.200.4.8:22-10.200.16.10:47306.service: Deactivated successfully. Nov 1 01:04:35.000423 kernel: audit: type=1106 audit(1761959074.979:1525): pid=5555 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:35.001142 systemd[1]: session-27.scope: Deactivated successfully. Nov 1 01:04:35.001874 systemd-logind[1416]: Session 27 logged out. Waiting for processes to exit. Nov 1 01:04:34.989000 audit[5555]: CRED_DISP pid=5555 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:35.022866 kernel: audit: type=1104 audit(1761959074.989:1526): pid=5555 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:35.023406 systemd-logind[1416]: Removed session 27. Nov 1 01:04:34.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.4.8:22-10.200.16.10:47306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:40.077063 systemd[1]: Started sshd@25-10.200.4.8:22-10.200.16.10:49482.service. Nov 1 01:04:40.098891 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 01:04:40.099018 kernel: audit: type=1130 audit(1761959080.076:1528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.4.8:22-10.200.16.10:49482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:40.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.4.8:22-10.200.16.10:49482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:40.679870 sshd[5568]: Accepted publickey for core from 10.200.16.10 port 49482 ssh2: RSA SHA256:AlhY8Qb6fVlZV7QUYELheUuRM7INJ6rje8ez2X++JEk Nov 1 01:04:40.681670 sshd[5568]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 01:04:40.678000 audit[5568]: USER_ACCT pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:40.700355 kernel: audit: type=1101 audit(1761959080.678:1529): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:40.679000 audit[5568]: CRED_ACQ pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:40.728415 kernel: audit: type=1103 audit(1761959080.679:1530): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:40.728523 kernel: audit: type=1006 audit(1761959080.679:1531): pid=5568 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Nov 1 01:04:40.736937 kernel: audit: type=1300 audit(1761959080.679:1531): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd56ae4d0 a2=3 a3=0 items=0 ppid=1 pid=5568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:40.679000 audit[5568]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd56ae4d0 a2=3 a3=0 items=0 ppid=1 pid=5568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 01:04:40.736526 systemd[1]: Started session-28.scope. Nov 1 01:04:40.738209 systemd-logind[1416]: New session 28 of user core. Nov 1 01:04:40.749090 systemd[1]: run-containerd-runc-k8s.io-c5d9d4a6dcf8a11d3b5fb62395437ee82891fe383baaf0178d8b3e43ee8f8d36-runc.3hfALo.mount: Deactivated successfully. Nov 1 01:04:40.679000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:40.769415 kernel: audit: type=1327 audit(1761959080.679:1531): proctitle=737368643A20636F7265205B707269765D Nov 1 01:04:40.759000 audit[5568]: USER_START pid=5568 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:40.760000 audit[5579]: CRED_ACQ pid=5579 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:40.813600 kernel: audit: type=1105 audit(1761959080.759:1532): pid=5568 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:40.813757 kernel: audit: type=1103 audit(1761959080.760:1533): pid=5579 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:41.202839 sshd[5568]: pam_unix(sshd:session): session closed for user core Nov 1 01:04:41.202000 audit[5568]: USER_END pid=5568 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:41.224363 kernel: audit: type=1106 audit(1761959081.202:1534): pid=5568 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:41.224000 audit[5568]: CRED_DISP pid=5568 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:41.227453 systemd[1]: sshd@25-10.200.4.8:22-10.200.16.10:49482.service: Deactivated successfully. Nov 1 01:04:41.228239 systemd[1]: session-28.scope: Deactivated successfully. Nov 1 01:04:41.229637 systemd-logind[1416]: Session 28 logged out. Waiting for processes to exit. Nov 1 01:04:41.230637 systemd-logind[1416]: Removed session 28. Nov 1 01:04:41.245352 kernel: audit: type=1104 audit(1761959081.224:1535): pid=5568 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 01:04:41.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.4.8:22-10.200.16.10:49482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 01:04:41.479423 env[1425]: time="2025-11-01T01:04:41.478608736Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 01:04:41.742560 env[1425]: time="2025-11-01T01:04:41.742401629Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:04:41.745192 env[1425]: time="2025-11-01T01:04:41.745112375Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 01:04:41.745434 kubelet[2460]: E1101 01:04:41.745375 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:04:41.745941 kubelet[2460]: E1101 01:04:41.745439 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 01:04:41.745941 kubelet[2460]: E1101 01:04:41.745596 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a7462746e0174c6e871c02909e388a73,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 01:04:41.747886 env[1425]: time="2025-11-01T01:04:41.747855220Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 01:04:42.011037 env[1425]: time="2025-11-01T01:04:42.010899700Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:04:42.014526 env[1425]: time="2025-11-01T01:04:42.014455860Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 01:04:42.014937 kubelet[2460]: E1101 01:04:42.014888 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:04:42.015100 kubelet[2460]: E1101 01:04:42.015079 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 01:04:42.015377 kubelet[2460]: E1101 01:04:42.015313 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-x96sc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fd5b94c59-v79cj_calico-system(2f749ad0-ece1-40aa-a58b-ea98337dd49c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 01:04:42.017001 kubelet[2460]: E1101 01:04:42.016935 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fd5b94c59-v79cj" podUID="2f749ad0-ece1-40aa-a58b-ea98337dd49c" Nov 1 01:04:42.478643 env[1425]: time="2025-11-01T01:04:42.478586063Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 01:04:42.741052 env[1425]: time="2025-11-01T01:04:42.740745414Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 01:04:42.744690 env[1425]: time="2025-11-01T01:04:42.744534377Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 01:04:42.745043 kubelet[2460]: E1101 01:04:42.744997 2460 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:04:42.745186 kubelet[2460]: E1101 01:04:42.745170 2460 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 01:04:42.745511 kubelet[2460]: E1101 01:04:42.745438 2460 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nlxhs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-77948f7547-899dr_calico-system(25c95b45-63cd-474c-ab3f-810f3121d2f5): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 01:04:42.747556 kubelet[2460]: E1101 01:04:42.747509 2460 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-77948f7547-899dr" podUID="25c95b45-63cd-474c-ab3f-810f3121d2f5"